Performance and isolation analysis of RunC, gVisor and Kata Containers runtimes
Performance and isolation analysis of RunC, gVisor and Kata Containers runtimes
复制标题
RunC、gVisor 和 Kata Containers 运行时的性能和隔离分析
DOI：
--
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Hui Liu
中科院分区：
文献类型：
--
作者：
Xing Wang;Junzhao Du;Hui Liu
容器具有资源效率，大多数IT行业都在采用基于容器的基础设施。但是，容器的安全性和隔离性相当薄弱。在这项工作中，我们旨在对加强集装箱隔离和安全性的集装箱化技术的性能特征进行深入的定量分析，并讨论各种集装箱化技术的适用场景。我们评估了RunC、gVisor和Kata容器运行时的多个云资源管理维度，包括性能、系统调用、启动时间、密度和隔离。实验结果表明，RunC和Kata容器的性能开销较小，而gVisor在I/O和系统调用方面的性能下降明显，尽管它的隔离性是最好的。我们的工作加深了对容器性能特征的理解，可以帮助云计算从业者在平台选择、系统维护和/或设计方面做出正确的决策。
Containers are resource-efficient and most IT industries are adopting container-based infrastructure. However, the security and isolation of the container is rather weak. In this work, we aim to conduct an in-depth quantitative analysis of the performance characteristics of containerization technologies that strengthen container isolation and security, and discuss the applicable scenarios of various containerization technologies. We evaluate multiple cloud resource management dimensions of RunC, gVisor, and Kata Containers runtimes, including performance, system call, startup time, density, and isolation. Experimental results show that RunC and Kata Containers have less performance overhead, while gVisor suffers significant performance degradation in I/O and system call, although its isolation is the best. Our work deepens the understanding of the container performance characteristics and may help cloud computing practitioners in making proper decisions on platform selection, system maintenance and/or design.
混合容器和虚拟机：Firecracker 和 gVisor 的研究
DOI：
10.1145/3381052.3381315
发表时间：
2020
期刊：
16th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments
影响因子：
--
作者：
Anjali, FNU;Caraza-Harter, Tyler;Swift, Michael M.
通讯作者：
Swift, Michael M.