ITR/SY+SI:The System Architecture of a Computing Utility

ITR/SY SI:计算工具的系统架构

• 批准号: 0121481
• 负责人: Monica Lam
• 金额: --
• 依托单位: Stanford University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-10-01 至 2009-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0121481&HistoricalAwards=false
• 关键词: ITR; SY+SI; System; Architecture; Computing

Computing services in the future should become just as available and easy to use as any of the modernutilities: power, water, or telephone service. A compute utility should work reliably and invisibly,providing users with simple, efficient access to their data and individualized computing environmentsanywhere in the world. Data kept in the utility may be private, publicly available, or shared betweendesignated parties. Our proposed compute utility architecture is based on the idea of a compute capsule, which capturesthe entire logical state of an active computing environment. A capsule is portable, persistent,host-independent, self-contained and can be suspended on disk, arbitrarily bound to different machines,and transparently resumed. Compute servers in a utility run a small trusted computing base, whichmanages the compute capsules like a cache. Users' capsules can be run on any of the compute servers inthe utility and are typically run on local machines for enhanced interactive performance. Capsules provideusers with customizabililty as well as a guarantee of isolation from other users. As persistent objects thatcan be shared, duplicated and version-controlled, capsules can be easily managed and administered. The compute utility model has significant advantages over our current environment. First, instead ofrequiring end users to procure, administer and upgrade their equipment individually, resources of a utilityare shared and managed centrally by experts, thus resulting in a more efficient system. Second, a globalutility allows users efficient access to their computing environment everywhere. They need not juggle alarge number of different interfaces and deal with the discontinuities as they move between home and workevery day. Third, a professionally managed compute utility designed to support global mobility andsharing can provide greater security than our current environment. In contrast, today novice users areresponsible for keeping their systems secure, and the lack of adequate support for sharing and mobilityleads to practices that jeopardize security. Fourth, the infrastructure of a utility serves as an excellentplatform for several emerging computing trends: software hosted remotely by application serviceproviders, support of ubiquitous access devices, and large-scale distributed computing. The goal of this research project is to investigate the viability of a compute utility and to lay thetechnical foundation for such an infrastructure. The techniques developed can also be applied to manage aninstitution's distributed resources. First, we will investigate the concept of capsules fully by studying their design and applications.Capsules can be implemented at the machine, operating system and application level; trade-offs betweenthese different approaches will be studied. We will also explore novel uses of capsules: capsules can beused to run untrusted software; they can provide secure and shared environments for group projects;capsules can also serve as pre-installed software packages ready to run on any machine. We will developthe associated tools to make capsuleseasy to use. Second, we will develop the technologies to ensure security in a compute utility. Security will beprovided at three levels: a small trusted kernel that provides isolation between capsules and monitorscapsules for added security; the use of certified capsules to create trusted computing environments; datasecurity will be provided by encryption, and sharing will be supported by a flexible key managementscheme. We plan to conduct a careful analysis of the vulnerabilities of the system. Third, this research will produce the technologies useful for creating scalable, efficient, and easilymaintainable compute utilities. They include techniques for managing machines in a globally distributedenvironment by treating them as caches of capsules, and techniques that combine capsule caching andremote display technology to support global mobility and sharing. This research will develop a prototype compute utility to validate the technology developed. To makeextensive experimentation possible, the prototype will support legacy software. The experiments will bedesigned especially to address the information technology needs of universities. Computer systems have gone through two major eras, time-sharing on mainframes and personalcomputing. The success of this research may usher in a new era of compute utility and have a significantimpact on our future computing practice.

未来的计算服务应该变得与任何现代公用事业一样可用和易于使用：电力、水或电话服务。计算实用程序应该可靠且不可见地工作，为用户提供简单、高效的数据访问以及世界上任何地方的个性化计算环境。公用事业中保存的数据可以是私有的、公开的或在指定的各方之间共享。我们提出的计算实用程序体系结构是基于计算胶囊的思想，它捕获活动计算环境的整个逻辑状态。胶囊是便携的、持久的、不依赖主机的、自包含的，可以挂在磁盘上，可以任意绑定到不同的机器上，并可以透明地恢复。公用事业中的计算服务器运行一个小型的可信计算基础，它像高速缓存一样管理计算胶囊。用户的胶囊可以在实用程序中的任何计算服务器上运行，通常在本地计算机上运行，以增强交互性能。胶囊为用户提供了可定制化以及与其他用户隔离的保证。作为可共享、复制和版本控制的持久化对象，胶囊易于管理和管理。与我们目前的环境相比，计算实用新型具有显著的优势。第一，公用事业的资源由专家集中共享和管理，而不是要求最终用户单独采购、管理和升级他们的设备，从而形成一个更有效率的系统。其次，全球实用程序允许用户在任何地方高效地访问他们的计算环境。他们不需要处理大量不同的接口和处理不连续的问题，因为他们每天往返于家和工作之间。第三，旨在支持全球移动性和共享的专业管理计算实用程序可以提供比我们当前环境更高的安全性。相比之下，今天的新手用户有责任确保他们的系统安全，缺乏对共享和移动性的足够支持导致了危及安全的做法。第四，公用事业的基础设施是几种新兴计算趋势的极佳平台：由应用服务提供商远程托管的软件、对无处不在的访问设备的支持以及大规模分布式计算。这项研究项目的目标是调查计算机实用程序的可行性，并为这样的基础设施奠定技术基础。开发的技术也可以应用于管理机构的分布式资源。首先，我们将通过研究胶囊的设计和应用来充分研究胶囊的概念。胶囊可以在机器、操作系统和应用程序级别实现；我们将研究这些不同方法之间的权衡。我们还将探索胶囊的新用途：胶囊可以用来运行不受信任的软件；它们可以为小组项目提供安全和共享的环境；胶囊还可以作为预先安装的软件包，准备在任何机器上运行。我们将开发相关工具，使胶囊易于使用。其次，我们将开发确保计算实用程序安全的技术。将在三个级别提供安全：一个小型可信内核，在胶囊和监视器之间提供隔离，以增加安全性；使用经过认证的胶囊来创建可信计算环境；数据安全将通过加密提供，共享将由灵活的密钥管理方案支持。我们计划对系统的漏洞进行仔细的分析。第三，这项研究将产生有助于创建可扩展、高效和易于维护的计算实用程序的技术。它们包括在全球分布的环境中通过将机器视为胶囊缓存来管理机器的技术，以及将胶囊缓存与远程显示技术相结合以支持全球移动性和共享的技术。这项研究将开发一个原型计算实用程序来验证所开发的技术。为了使广泛的实验成为可能，原型将支持遗留软件。这些实验将专门为满足大学的信息技术需求而设计。计算机系统已经经历了两个主要时代：大型机分时和个人计算。这项研究的成功可能会开启计算实用的新时代，并对我们未来的计算实践产生重大影响。