Showing posts with label virtualization. Show all posts
Showing posts with label virtualization. Show all posts

Monday, March 3, 2008

Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems

Authors: Xiaoxin Chen (VMWare), Tal Garfinkel (VMWare), E. Christopher Lewis (VMWare), Pratap Subrahmanyam (VMWare), Carl A. Waldspurger (VMWare), Dan Boneh (Stanford), Jeffrey Dwoskin (Princeton), Dan R. K. Ports (MIT)

Questions:

Q: Cloaking needs to be atomic? How?
A: Has to be atomic w/ respect to OS. No real fallout for concurrent systems.

Q: Why is MARSHALL mini-benchmark worse than PASSTHRU?
A:

Q: Could you reverse it and use it in the OS to protect against malicious VM?
A: Huh. Maybe.

Q: What's your threat model?
A: Don't worry about I/O (things like SSL protect network).

Q: Why is mmap read performance worse than write?
A: Write has to touch disk anyway, so minimal additional overhead. Read needs an extra page fault.

Tuesday, October 16, 2007

VirtualPower: Coordinated Power Management in Virtualized Enterprise Systems

Authors: Ripal Nathuji (Georgia Institute of Technology) and Karsten Schwan (Georgia Institute of Technology)

Paper: http://www.sosp2007.org/papers/sosp111-nathuji.pdf

Datacenters need power management. Cooling makes things worse. Indusry deployed ACPI.

How do you maintain power information in virtualization layer?

Lots of platform heterogeneity in a datacenter. Variations in power, performance, managability. Homogenize using VMs. Can restrict physical utilization of a VM ("soft scaling"). Can adhere to virtualization SLAs in the guest OS without being specifically aware of them. Take advantage of feedback loop.

Implementation: VPM events created when guest OS makes a power call. Dom0 can retrieve these events.

Future work: VPM tokens, idle power management (additional VPM C-states), efficient soft-scale consolidations

Q: Any estimate of whether adherence to OS power interface has a cost?
A: Want to look at it. Looking at a lightweight paravirtualization solution.

Q: What about consolidating nodes (i.e., shutting down physical nodes)?
A: Well, we can do this on-the-fly automatically.