SGER: Prototyping Application-Specific Kernel Virtual Machines for Networking

在网络研究中，对集成服务的需求往往会导致某些专业应用程序的服务供应严重不足。虽然应用程序可能能够直接用附加代码进行补偿，但是在具有刚性接口的受保护地址空间中放置许多必要资源（例如，操作系统）可能使得有效补偿在实践中即使不是不可能也是困难的。这里提出的实验研究，在多个受限虚拟机（MrVM），需要一个高风险，但可能非常有前途的方法来解决这个问题。其基本概念是构建虚拟机服务的特定于应用程序的补充，以嵌入到传统的操作系统中。通过这种方式，可以满足特定于应用程序的需求，而对MrVM解释的限制将应用程序与其他应用程序以及共享服务隔离开来。

The desire for integrated services in networking research often results in significant shortfalls in service provision for some specialized applications. While the applications may be able to directly compensate with additional code, the placement of many necessary resources in protected address spaces with rigid interfaces (e.g., the operating system) may make effective compensation difficult if not impossible in practice. The experimental research proposed here, in Multiple restricted Virtual Machines (MrVM), takes a high-risk but potentially very promising approach to addressing this problem. The basic notion is to construct an application-specific complement of virtual machine services to embed into a conventional operating system. In this way, the application-specific requirements can be met, while the restrictions placed on MrVM interpretation insulate applications from each other and from the shared services.