Can we containerize internet measurements?
Can we containerize internet measurements?
复制标题
DOI：
10.1145/3340301.3341130
复制
发表时间：
2019-07
期刊：
影响因子：
--
通讯作者：
Chris Misa;Sudarsun Kannan;Ramakrishnan Durairajan
中科院分区：
文献类型：
--
作者：
Chris Misa;Sudarsun Kannan;Ramakrishnan Durairajan
容器系统（例如，Docker）提供了一个定义良好、轻量级和通用的基础，以简化工具部署过程，提供一致和可重复的实验接口，并利用全球云基础设施中的数据中心作为测量的Vantage位置。然而，已知通常用于将容器连接到互联网的虚拟网络设备会造成延迟开销，这会扭曲在容器内运行的测量工具报告的值。在这项研究中，我们开发了一个名为MACE的工具来测量和消除Docker容器使用的虚拟网络设备的延迟开销。MACE的一个关键见解是容器函数都在同一个内核中执行。基于这一见解，MACE被实现为一个Linux内核模块，使用跟踪事件子系统来测量网络堆栈代码路径上的延迟沿着。使用CloudLab，我们通过比较从slim-ping容器发出的ping测量值与在不同流量负载下使用在裸金属机器中运行的相同工具发出的ping测量值来评估MACE。我们的评估表明，平均而言，MACE调整的RTT测量值在裸金属ping RTT的20 μs内，同时引起小于25 μs的RTT扰动。我们还比较了由MACE引起的RTT扰动与由内置的ftrace内核跟踪系统引起的扰动，发现MACE引起的扰动较小。
Container systems (e.g., Docker) provide a well-defined, lightweight, and versatile foundation to streamline the process of tool deployment, to provide a consistent and repeatable experimental interface, and to leverage data centers in the global cloud infrastructure as measurement vantage points. However, the virtual network devices commonly used to connect containers to the Internet are known to impose latency overheads which distort the values reported by measurement tools running inside containers. In this study, we develop a tool called MACE to measure and remove the latency overhead of virtual network devices as used by Docker containers. A key insight of MACE is the fact that container functions all execute in the same kernel. Based on this insight, MACE is implemented as a Linux kernel module using the trace event subsystem to measure latency along the network stack code path. Using CloudLab, we evaluate MACE by comparing the ping measurements emitted from a slim-ping container to the ones emitted using the same tool running in the bare metal machine under varying traffic loads. Our evaluation shows that the MACE-adjusted RTT measurements are within 20 μs of the bare metal ping RTTs on average while incurring less than 25 μs RTT perturbation. We also compare RTT perturbation incurred by MACE with perturbation incurred by the built-in ftrace kernel tracing system and find that MACE incures less perturbation.