Understanding the Overheads of Hardware and Language-Based IPC Mechanisms
Understanding the Overheads of Hardware and Language-Based IPC Mechanisms
复制标题
了解硬件和基于语言的 IPC 机制的开销
DOI：
10.1145/3477113.3487275
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Burtsev, Anton
中科院分区：
文献类型：
--
作者：
Li, Zhaofeng;Huang, Tianjiao;Narayanan, Vikram;Burtsev, Anton
最近安全攻击的激增引发了对硬件支持隔离的新兴趣。使用VMF的扩展页表交换、内存保护密钥（MPK）和内存标记扩展（MTE）只是保证在最近的CPU中支持低开销隔离的几种硬件隔离机制。沿着人们对轻量级硬件隔离机制的兴趣恢复，像Rust这样的安全编程语言已经朝着实用的、零开销的安全性迈出了一大步，而无需垃圾收集。轻量级硬件机制和零开销的语言安全性都可以用来加强子系统的隔离，例如，浏览器插件、设备驱动程序和内核扩展、用户定义的数据库和网络函数等。但由于这两种技术都还很年轻，它们的相对优势还不清楚。在这项工作中，我们研究了硬件和软件隔离机制的开销，目的是了解它们的相对优势和劣势，为子系统的细粒度隔离与紧张的性能预算。我们提出两个问题：在硬件隔离机制占用零周期的理想场景中，硬件隔离的开销是多少？如果Rust语言的安全性可以降低跨子系统调用的开销，那么该语言本身是否会引入可能超过隔离优势的开销？为了回答这些问题，我们开发并比较了两个精心优化的进程间通信（IPC）机制版本（一个在安全的Rust中，一个在精心优化的程序集中），以及两个相同的（尽可能）基于DPDK的网络数据包处理框架（一个在C++中，一个在Rust中）。我们的分析表明，对于需要频繁边界穿越的系统，即使硬件隔离机制的开销降至零，安全的语言仍然是有益的。
A recent surge of security attacks has triggered a renewed interest in hardware support for isolation. Extended page table switching with VMFUNC, memory protection keys (MPK), and memory tagging extensions (MTE) are just a few of the hardware isolation mechanisms that promise support for low-overhead isolation in recent CPUs. Along with the restored interest in lightweight hardware isolation mechanisms, safe programming languages like Rust has made a leap towards practical, zero-overhead safety implemented without garbage collection.Both lightweight hardware mechanisms and zero-overhead language safety can be leveraged to enforce the isolation of subsystems, e.g., browser plugins, device drivers and kernel extensions, user-defined database and network functions, etc. However, as both technologies are still young, their relative advantages are still unknown. In this work, we study the overheads of hardware and software isolation mechanisms with the goal to understand their relative advantages and disadvantages for fine-grained isolation of subsystems with tight performance budgets. We ask two questions: What is the overhead of hardware isolation in an ideal scenario where the hardware isolation mechanism takes zero cycles? And if the safety of the Rust language can lower the overhead of cross-subsystem invocations, can the language on its own introduce overheads that might outweigh isolation advantages? To answer these questions, we develop and compare two carefully optimized versions of inter-process communication (IPC) mechanisms (one in safe Rust and one in a carefully-optimized assembly), and two identical (to the degree possible) DPDK-based network packet processing frameworks (one in C++ and one in Rust). Our analysis shows that for systems requiring frequent boundary crossings, a safe language is still beneficial even if the overheads of hardware isolation mechanisms drop to zero.
登录
查看更多内容
J-Kernel：基于功能的 Java 操作系统
影响因子：
--
作者：
T. V. Eicken;Chi;G. Czajkowski;C. Hawblitzel;Deyu Hu;Daniel Spoonhower
通讯作者：
Daniel Spoonhower
DOI：
--
发表时间：
2018-10
期刊：
--
影响因子：
--
作者：
C. Kulkarni;S. Moore;Mazhar Naqvi;Tian Zhang;R. Ricci;Ryan Stutsman
通讯作者：
C. Kulkarni;S. Moore;Mazhar Naqvi;Tian Zhang;R. Ricci;Ryan Stutsman
SawMill 多服务器方法
DOI：
10.1145/566726.566751
发表时间：
2000
期刊：
Proceedings of the 9th workshop on ACM SIGOPS European workshop: beyond the PC: new challenges for the operating system
影响因子：
--
作者：
A. Gefflaut;T. Jaeger;Yoonho Park;J. Liedtke;Kevin Elphinstone;Volkmar Uhlig;Jonathon Tidswell;Luke Deller;Lars Reuther
通讯作者：
Lars Reuther
使用高级编程语言编写网络驱动程序的案例
DOI：
10.1109/ancs.2019.8901892
发表时间：
2019
期刊：
2019 ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS)
影响因子：
--
作者：
Paul Emmerich;Simon Ellmann;Fabian Bonk;A. Egger;Esaú García Sánchez;T. Günzel;Sebastian Di Luzio;Alexandru Obada;Maximilian Stadlmeier;Sebastian Voit;G. Carle
通讯作者：
G. Carle
DOI：
--
发表时间：
2020
期刊：
--
影响因子：
--
作者：
Vikram Narayanan;Tianjiao Huang;David Detweiler;Daniel M. Appel;Zhaofeng Li;Gerd Zellweger;A. Burtsev
通讯作者：
Vikram Narayanan;Tianjiao Huang;David Detweiler;Daniel M. Appel;Zhaofeng Li;Gerd Zellweger;A. Burtsev