CAREER: Safe and Efficient Extensions for Low-Latency Multitenant Storage

企业正在将数据和应用程序迁移到云中，这意味着许多应用程序和数据可以在更少的服务器上有效地整合到一个地方。云存储服务必须将成千上万客户的数据分开，同时允许客户有效地对其进行操作。将客户提供的操作安全地混合在数据上是有问题的。从历史上看，处理器硬件是将程序隔离开来的，但不断增加的数据访问速率使其成本高昂。该项目开发了一种新的存储方法，可以使用最新的编程语言在没有硬件保护的情况下对数据进行安全操作。该方法通过将不受信任的租户扩展推送到Sandstorm（一种新的云存储系统）来防止在分解存储和计算节点之间的数据移动。Sandstorm的见解是，存储扩展可以使用语言级隔离来消除目前无法避免的硬件隔离开销：虚拟机、容器或无服务器lambda都无法避免。为了安全起见，Sandstorm还消除了复制数据的问题，因此扩展可以从零复制网络传输等低级硬件功能中受益。该项目将开发多租户基准测试、用于多核的低成本性能隔离并发机制、最小化服务器内数据移动的技术、展示其优势的存储扩展以及集群上的分布式扩展。由于电力限制了数据中心的规模，最大限度地减少数据从存储中移出变得至关重要。Sandstorm使任何云开发人员能够加速数据密集型应用程序，如实时社交网络和自然图形分析，以及数十万辆自动驾驶汽车的细粒度协调。所有工件将在麻省理工学院许可下公开开发，供学术和工业使用。该项目包括开发一个新的教育平台，用于向研究生、本科生和高中的学生讲授分布式系统和云计算，并为犹他大学的学生和夏令营参与者提供一套无服务器计算实验室。所有数据、代码、实验和基准都将通过http://github.com/utah-scs/和http://utah.systems/公开提供，并在项目奖励期后至少保留三年。所有数据、代码、基准测试和与所有已发布结果相关的实验也将作为哈佛数据厌恶的一部分托管在http://dataverse.harvard.edu/dataverse/utah-scs上，以便长期保留。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Businesses are moving data and applications into the cloud, meaning that many applications and data are consolidated efficiently in one place on fewer servers. Cloud storage services must keep the data of thousands of customers separated while also allowing customers to operate on it efficiently. Safely intermixing customer-provided operations over data is problematic. Historically, processor hardware isolates programs, but increasing data access rates make that costly. This project develops a new approach to storage that allows safe operation on data without hardware protection using recent advances in programming languages.The approach combats data movement between disaggregated storage and compute nodes by having untrusted tenant extensions pushed to Sandstorm, a new cloud storage system. Sandstorm's insight is that storage extensions can use language-level isolation to eliminate hardware isolation overheads that cannot be avoided today: not with virtual machines, containers, nor serverless Lambdas. Sandstorm also eliminates copying data for safety, so extensions benefit from low-level hardware functionality like zero-copy network transmission. The project will develop multitenant benchmarks, low-cost performance-isolated concurrency mechanisms for multicores, techniques to minimize data movement within servers, storage extensions that demonstrate the benefits, and distributed extensions over clusters.As power limits data center scale, minimizing data movement out of storage becomes crucial. Sandstorm enables any cloud developer to accelerate data-intensive applications like real-time social network and natural graph analysis and fine-grained coordination of hundreds of thousands of autonomous vehicles. All artifacts will be developed openly under a permissive MIT license for academic and industrial use. The project includes development of a new education platform for teaching students about distributed systems and cloud computing at the graduate, undergraduate, and high school levels with a set of serverless computing labs targeted toward University of Utah students and summer camp attendees. All data, code, experiments, and benchmarks will be open and made publicly available through http://github.com/utah-scs/ and at http://utah.systems/ and retained for a minimum of three years beyond the project award period. All data, code, benchmarks, and experiments associated with all published results will also be hosted at http://dataverse.harvard.edu/dataverse/utah-scs as part of the Harvard Dataverse for long-term retention.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.