SGER: Prototyping Application-Specific Kernel Virtual Machines for Networking

在网络研究中对综合服务的渴望常常导致某些专门应用的服务提供严重不足。虽然应用程序可以直接用额外的代码进行补偿，但是在具有严格接口（例如，操作系统）的受保护地址空间中放置许多必要的资源可能会使有效的补偿变得困难（如果不是不可能的话）。这里提出的实验研究，在多个受限虚拟机（MrVM）中，采用了一种高风险但潜在的非常有前途的方法来解决这个问题。基本概念是构造一个特定于应用程序的虚拟机服务的补充，以嵌入到传统的操作系统中。通过这种方式，可以满足特定于应用程序的需求，同时对MrVM解释的限制将应用程序彼此隔离，也将应用程序与共享服务隔离。

The desire for integrated services in networking research often results in significant shortfalls in service provision for some specialized applications. While the applications may be able to directly compensate with additional code, the placement of many necessary resources in protected address spaces with rigid interfaces (e.g., the operating system) may make effective compensation difficult if not impossible in practice. The experimental research proposed here, in Multiple restricted Virtual Machines (MrVM), takes a high-risk but potentially very promising approach to addressing this problem. The basic notion is to construct an application-specific complement of virtual machine services to embed into a conventional operating system. In this way, the application-specific requirements can be met, while the restrictions placed on MrVM interpretation insulate applications from each other and from the shared services.