RedLeaf: Isolation and Communication in a Safe Operating System
RedLeaf: Isolation and Communication in a Safe Operating System
复制标题
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Vikram Narayanan;Tianjiao Huang;David Detweiler;Daniel M. Appel;Zhaofeng Li;Gerd Zellweger;A. Burtsev
中科院分区：
文献类型：
--
作者：
Vikram Narayanan;Tianjiao Huang;David Detweiler;Daniel M. Appel;Zhaofeng Li;Gerd Zellweger;A. Burtsev
Redleaf是一种新的操作系统，从Rust中开发出来，探索语言安全对操作系统组织的影响，而Redleaf不依赖硬件地址空间进行隔离，而仅使用Rust的类型和记忆安全语言与昂贵的硬件隔离机制不同，我们可以探索采用轻巧的细粒度隔离的系统的设计空间可以动态加载并干净地终止，即一个域中的错误不会影响其他域的执行，我们证明了实现端到端零副本，透明恢复的可能性设备驱动程序。为了评估红叶抽象的实践，我们实现了RV6，这是一种posix-subset操作系统，作为红叶域的集合。 Intel IXGBE网络和NVME固态磁盘设备驱动程序符合最快的DPDK和SPDK等效量的性能。
RedLeaf is a new operating system developed from scratch in Rust to explore the impact of language safety on operating system organization. In contrast to commodity systems, RedLeaf does not rely on hardware address spaces for isolation and instead uses only type and memory safety of the Rust language. Departure from costly hardware isolation mechanisms allows us to explore the design space of systems that embrace lightweight fine-grained isolation. We develop a new abstraction of a lightweight language-based isolation domain that provides a unit of information hiding and fault isolation. Domains can be dynamically loaded and cleanly terminated, i.e., errors in one domain do not affect the execution of other domains. Building on RedLeaf isolation mechanisms, we demonstrate the possibility to implement end-to-end zero-copy, fault isolation, and transparent recovery of device drivers. To evaluate the practicality of RedLeaf abstractions, we implement Rv6, a POSIX-subset operating system as a collection of RedLeaf domains. Finally, to demonstrate that Rust and fine-grained isolation are practical—we develop efficient versions of a 10Gbps Intel ixgbe network and NVMe solid-state disk device drivers that match the performance of the fastest DPDK and SPDK equivalents.