CNS Core: Medium: Rethinking Architecture and Operating Systems for Modern Virtualization Technologies

CNS 核心：中：重新思考现代虚拟化技术的架构和操作系统

• 批准号: 1956007
• 负责人: Josep Torrellas
• 金额: $ 85万
• 依托单位: University of Illinois at Urbana-Champaign
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1956007&HistoricalAwards=false
• 关键词: CNS; Core; Medium; Rethinking; Architecture

This project addresses important challenges posed by the widespread deployment of modern virtualization technologies, including containers and function-as-a-service environments. Containers are very low-overhead virtual machines, and function-as-a-service environments are systems where users run many small jobs, and are billed as such. In these environments, two major challenges are insecurity due to the lack of isolation, and poor scalability due to the many jobs that are running. This project rethinks the computer architecture and the operating system of machines to support these environments securely and scalably.This work develops a set of novel, transformative computer architecture and operating system technologies that will dramatically improve the security and the scalability of novel virtualization technologies. On the security side, this project will explore novel hardware and software designs to filter system calls efficiently. The idea is to examine every system call that programs issue at runtime and check and validate their arguments for security. On the scalability side, this project will enable the ability to run thousands of containers or functions on the same machine simultaneously, by redesigning TLBs (Translation Lookaside Buffers) and page tables. Overall, these technologies will enhance cloud computing. This project will initiate an effort on multidisciplinary research and education on whole-system support for modern virtualization technologies in cloud at the University of Illinois. The efforts in this project include working with the Department of Computer Science to broaden the course offerings with multidisciplinary courses in the general area of cloud computing and datacenter technologies. This project will also offer research opportunities to undergraduate students, and broaden participation to under-represented minorities. The project will include an effort of coaching middle and high school robotics teams. This project will maintain a repository with all the data, code, results, emulators and simulators used and developed during the duration of the project. The repository will be accessible password-free through http://iacoma.cs.uiuc.edu, and will be kept up to date for at least three years after the project ends.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目解决了现代虚拟化技术的广泛部署所带来的重要挑战，包括容器和功能即服务环境。容器是非常低开销的虚拟机，而功能即服务环境是用户运行许多小作业的系统，并按此计费。在这些环境中，两个主要挑战是由于缺乏隔离而导致的不安全性，以及由于运行的作业多而导致的可伸缩性差。该项目重新思考计算机体系结构和机器的操作系统，以安全和可扩展地支持这些环境。这项工作开发了一套新颖的，变革性的计算机体系结构和操作系统技术，将大大提高安全性和新的虚拟化技术的可扩展性。在安全方面，本项目将探索新的硬件和软件设计，以有效地过滤系统调用。这个想法是检查程序在运行时发出的每个系统调用，并检查和验证它们的安全参数。在可扩展性方面，该项目将通过重新设计TLB（翻译后备缓冲区）和页表，实现在同一台机器上同时运行数千个容器或函数的能力。总的来说，这些技术将增强云计算。该项目将在伊利诺伊大学开展多学科研究和教育，为云计算中的现代虚拟化技术提供全系统支持。该项目的努力包括与计算机科学系合作，在云计算和数据中心技术的一般领域扩大多学科课程的课程设置。该项目还将为本科生提供研究机会，并扩大代表性不足的少数民族的参与。该项目将包括指导初中和高中机器人团队的努力。该项目将维护一个存储库，其中包含项目期间使用和开发的所有数据、代码、结果、仿真器和模拟器。该存储库将通过http://iacoma.cs.uiuc.edu免密码访问，并将在项目结束后至少三年内保持最新状态。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Parallel virtualized memory translation with nested elastic cuckoo page tables

使用嵌套弹性布谷鸟页表进行并行虚拟化内存转换

• DOI: 10.1145/3503222.3507720
• 发表时间: 2022
• 期刊: Proceedings of the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems
• 作者: Stojkovic, Jovan;Skarlatos, Dimitrios;Kokolis, Apostolos;Xu, Tianyin;Torrellas, Josep
• 通讯作者: Torrellas, Josep

MXFaaS: Resource Sharing in Serverless Environments for Parallelism and Efficiency

• DOI: 10.1145/3579371.3589069
• 发表时间: 2023-06
• 期刊: Proceedings of the 50th Annual International Symposium on Computer Architecture
• 作者: Jovan Stojkovic;Tianyi Xu;H. Franke;J. Torrellas

Verified programs can party: optimizing kernel extensions via post-verification merging

• DOI: 10.1145/3492321.3519562
• 发表时间: 2022-03
• 期刊: Proceedings of the Seventeenth European Conference on Computer Systems
• 作者: H. Kuo;Kaiyu Chen;Yicheng Lu;Daniel W. Williams;Sibin Mohan;Tianyi Xu

Memory-Efficient Hashed Page Tables

• DOI: 10.1109/hpca56546.2023.10071061
• 发表时间: 2023-02
• 期刊: 2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA)
• 作者: Jovan Stojkovic;Namrata Mantri;Dimitrios Skarlatos;Tianyi Xu;J. Torrellas

SpecFaaS: Accelerating Serverless Applications with Speculative Function Execution

• DOI: 10.1109/hpca56546.2023.10071120
• 发表时间: 2023-02
• 期刊: 2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA)
• 作者: Jovan Stojkovic;Tianyi Xu;H. Franke;J. Torrellas