CSR: Small: Split Virtual Machine Execution for Reliability and Security

数据中心是云计算的支柱，云计算因其经济效益已成为一种重要的计算范式。然而，云计算的可靠性和安全性方面仍然需要更多的调查。在云计算中，虚拟机（也称为虚拟服务器或vm）是计算的主要单位之一：客户租用vm，每个vm封装一个操作系统和客户的应用程序。在云计算数据中心中，许多物理服务器（每个运行管理程序虚拟化软件）提供运行虚拟服务器所需的计算资源。在硬件故障或物理服务器的安全漏洞等紧急情况下，需要立即将虚拟机从其运行的受影响的物理服务器上移走。但是，没有任何一台不受影响的物理服务器能够及时拥有在该实例上运行虚拟机所需的确切资源。同时，两台或两台以上的服务器可能共同拥有运行虚拟机所需的资源。这个项目的目的是允许一个虚拟机被拆分，这样在这种情况下，它可以在两个或更多的服务器上一起运行。这有望提高私有、商业和政府云计算提供商的可靠性、安全性和利用率。该项目将探索Split-VM执行的创新理念，这是一种新技术，允许将VM分解为更小的部分，并在不同的物理服务器上继续作为一个部分执行。该项目的一个特别重点将是将VM分成两个部分，并展示这样的操作可以透明和高效地完成。驻留在不同物理服务器上的VM的分割块之间的内存一致性和中断管理问题也将在本研究中得到解决。将开发用于同步和控制这两个虚拟机的新协议，以便运行在不同物理服务器上的底层虚拟化软件可以管理在Split-VM模式下运行的虚拟机，从而使Split-VM的两个部分具有相同的内存视图，并且事件（例如中断）可以无缝地在两者之间传递。这个项目更广泛的影响将提供对透明地将虚拟机分成可以在单独的物理服务器上运行的部分的见解。这些拆分机制将在流行的开源Linux操作系统和开源Xen虚拟化软件上开发和原型化，新的代码将与社区共享。将评估拆分操作的性能以及拆分后VM的执行情况，以深入了解所提出的想法的性能，并帮助量化其可靠性和安全性优势。这项提议的工作也将成为指导未来将虚拟机分成许多部分的研究的踏脚石，而不仅仅是两个。因此，这个split - vm项目是提高云数据中心利用率、可靠性和安全性的第一步，它使商品虚拟机能够透明地在不同的物理服务器之间进行分割。

Data centers are the backbone of cloud computing, which has become an important computing paradigm due to its economic benefits. Reliability and security aspects of cloud computing, however, still need more investigation. In cloud computing, virtual machines (also called virtual servers or VMs) are one of the primary units of computation: customers lease VMs, each encapsulating an operating system and a customer's applications. In cloud computing data centers, many physical servers - each running hypervisor virtualization software - provide compute resources needed to run the virtual servers. In emergency situations like hardware failure or the security breach of a physical server, a VM needs to be immediately moved away from the affected physical server on which it is running. However, no single unaffected physical server may have the exact resources needed to run the VM at that exact instance in time. Meanwhile, two or more servers may collectively have the resources needed to run the VM. This project aims to allow a VM to be split so it can be run on two or more servers together in such a situation. This has promise of increasing the reliability, security and utilization of private, commercial and government cloud computing providers. This project will explore an innovative idea of Split-VM execution, a new technique that will allow for a VM to be broken up into smaller pieces and to continue executing as one, while the pieces are on different physical servers. A particular focus of the project will be on splitting a VM into two pieces and showing that such operation can be done transparently and efficiently. Issues of memory coherency and interrupt management among the split pieces of the VM residing on different physical severs will be addressed in this research as well. New protocols for synchronizing and controlling the two pieces of the VM will be developed so that the underlying virtualization software running on different physical servers can manage the VMs while they are operating in the Split-VM mode enabling both pieces of a Split-VM to have same view of the memory, and events, such as interrupts, to be seamlessly delivered between the two.The broader impacts of this project will offer insight into transparently splitting a VM into parts that can run on separate physical servers. These splitting mechanisms will be developed and prototyped on popular open-source Linux operating system and on open-source Xen virtualization software, with new code shared back to the community. Performance of the splitting operation and also of the execution of the VM after splitting will be evaluated to give insights into the performance of the proposed idea and to help quantify its reliability and security benefits. The proposed work will also be a stepping-stone to guide future research on splitting VMs into many pieces, not just two. This Split-VM project is thus a first step towards improving cloud data center utilization, reliability and security by enabling commodity VMs to be transparently split among different physical servers.