{"id":120564,"date":"2024-11-13T13:09:15","date_gmt":"2024-11-13T11:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah"},"modified":"2024-11-13T13:09:15","modified_gmt":"2024-11-13T11:09:16","slug":"microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","title":{"rendered":"Microsoft uvedl Hyperlight, hypervizor pro izolaci jednotliv\u00fdch funkc\u00ed v aplikac\u00edch.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Microsoft p\u0159edstavila projekt Hyperlight, kter\u00fd vyv\u00edj\u00ed hypervisor ur\u010den\u00fd k integraci do aplikac\u00ed za \u00fa\u010delem izolovan\u00e9 exekuce k\u00f3du, kter\u00fd nen\u00ed d\u016fv\u011bryhodn\u00fd nebo vy\u017eaduje zvl\u00e1\u0161tn\u00ed ochranu. Hypervisor je koncipov\u00e1n jako sd\u00edlen\u00e1 knihovna, kter\u00e1 zaji\u0161\u0165uje prov\u00e1d\u011bn\u00ed jednotliv\u00fdch funkc\u00ed ve v\u00e1hov\u011b lehk\u00fdch virtu\u00e1ln\u00edch stroj\u00edch (micro-VM) a organizuje v\u00fdm\u011bnu dat s t\u011bmito funkcemi. K\u00f3d projektu je naps\u00e1n v jazyce Rust a \u0161\u00ed\u0159\u00ed se pod licenc\u00ed Apache 2.0. <\/p>\n

Ve srovn\u00e1n\u00ed s tradi\u010dn\u00edm spu\u0161t\u011bn\u00edm virtu\u00e1ln\u00edch stroj\u016f<\/a> Hyperlight umo\u017e\u0148uje dos\u00e1hnout n\u00edzk\u00e9 latence a minim\u00e1ln\u00edch re\u017eijn\u00edch n\u00e1klad\u016f. V Hyperlight latence p\u0159i vytv\u00e1\u0159en\u00ed virtu\u00e1ln\u00edch stroj\u016f \u010din\u00ed 1-2 milisekundy, co\u017e umo\u017e\u0148uje vyu\u017eit\u00ed izolace na \u00farovni spu\u0161t\u011bn\u00ed funkc\u00ed. Pro srovn\u00e1n\u00ed b\u011b\u017en\u00fd virtu\u00e1ln\u00ed stroj je spu\u0161t\u011bn nejm\u00e9n\u011b za 120 milisekund, zat\u00edmco spu\u0161t\u011bn\u00ed izolovan\u00e9ho sandboxu pro exekuci k\u00f3du WebAssembly pomoc\u00ed runtime Wasmtime trv\u00e1 0,03 milisekundy. <\/p>\n

Pro izola\u010dn\u00ed \u00fa\u010dely na platform\u011b Linux je podpora hypervizor\u016f KVM a mshv (Microsoft Hypervisor v Azure Linux), zat\u00edmco na platform\u011b Windows se pou\u017e\u00edvaj\u00ed WHP (Windows Hypervisor Platform) a WSL2 (Windows Subsystem for Linux 2) s KVM. Platforma macOS prozat\u00edm nen\u00ed podporov\u00e1na. Samostatn\u00e9 j\u00e1dro a opera\u010dn\u00ed syst\u00e9m v virtu\u00e1ln\u00edm stroji<\/a> se nepou\u017e\u00edvaj\u00ed. Obsah virtu\u00e1ln\u00edho stroje je tvo\u0159en ve form\u011b samostatn\u011b spustiteln\u00e9ho programu, kter\u00fd zahrnuje k\u00f3d spou\u0161t\u011bn\u00e9 funkce ve svazku runtime a specializovan\u00e9ho minim\u00e1ln\u00edho j\u00e1dra. V virtu\u00e1ln\u00edm stroji se pou\u017e\u00edv\u00e1 jednotn\u00fd liniov\u00fd fragment pam\u011bti a je p\u0159id\u011blen virtu\u00e1ln\u00ed CPU, bez mapov\u00e1n\u00ed za\u0159\u00edzen\u00ed a bez rozd\u011blen\u00ed na procesy. <\/p>\n

Proces v\u00fdvoje je zalo\u017een na propojen\u00ed z\u00e1kladn\u00edho k\u00f3du aplikace s knihovnou Hyperlight Host, kter\u00e1 koordinuje spu\u0161t\u011bn\u00ed virtu\u00e1ln\u00edch stroj\u016f, a k\u00f3du spou\u0161t\u011bn\u00fdch funkc\u00ed v izolovan\u00e9m re\u017eimu (hostitelsk\u00fdch funkc\u00ed) s knihovnou Hyperlight Guest, kter\u00e1 poskytuje API pro interakci s vn\u011bj\u0161\u00ed \u010d\u00e1st\u00ed aplikace a mo\u017enosti pro odd\u011blen\u00e9 prov\u00e1d\u011bn\u00ed k\u00f3du bez prost\u0159ed\u00ed opera\u010dn\u00edho syst\u00e9mu.

\"Microsoft<\/center> <\/p>\n

Poskytovan\u00e1 vrstva pro interakci mezi hostitelskou aplikac\u00ed a izolovan\u00fdmi funkcemi umo\u017e\u0148uje nejen vol\u00e1n\u00ed izolovan\u00fdch funkc\u00ed z hostitelsk\u00fdch aplikac\u00ed, ale tak\u00e9 naopak, p\u0159\u00edstup k funkc\u00edm hostitelsk\u00fdch aplikac\u00ed z izolovan\u00fdch funkc\u00ed. Seznam extern\u00edch funkc\u00ed povolen\u00fdch k vol\u00e1n\u00ed z izolovan\u00fdch funkc\u00ed je p\u0159\u00edsn\u011b reglementov\u00e1n. Ve v\u00fdchoz\u00edm nastaven\u00ed je p\u0159\u00edstup z izolovan\u00fdch funkc\u00ed omezen na minim\u00e1ln\u00ed API, kter\u00e9 umo\u017e\u0148uje p\u0159ed\u00e1vat zpr\u00e1vy hostitelsk\u00e9 aplikaci. <\/p>\n

V budoucnu pl\u00e1nuje Microsoft p\u0159ev\u00e9st projekt na neziskovou organizaci Cloud Native Computing Foundation (CNCF) pro spolupr\u00e1ci na neutr\u00e1ln\u00ed platform\u011b, nez\u00e1visl\u00e9 na jednotliv\u00fdch v\u00fdrobc\u00edch. Organizace CNCF pracuje pod z\u00e1\u0161titou Linux Foundation a dohl\u00ed\u017e\u00ed na v\u00fdvoj takov\u00fdch projekt\u016f, jako jsou Kubernetes, etcd, Cilium, Containerd, cri-o, Flux, Helm, Istio a gRPC.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Hyperlight, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d \u0432 \u0432\u0438\u0434\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 (micro-VM) \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0449\u0435\u0439 \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u044d\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120565,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120564","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft uvedl Hyperlight, hypervizor pro izolaci jednotliv\u00fdch funkc\u00ed v aplikac\u00edch | ProHoster","description":"Spole\u010dnost Microsoft p\u0159edstavila projekt Hyperlight, kter\u00fd rozv\u00edj\u00ed hypervizor ur\u010den\u00fd pro integraci do aplikac\u00ed za \u00fa\u010delem izolovan\u00e9ho prov\u00e1d\u011bn\u00ed k\u00f3du, kter\u00fd nen\u00ed d\u016fv\u011bryhodn\u00fd nebo vy\u017eaduje zvl\u00e1\u0161tn\u00ed ochranu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0440\u044b\u043b Hyperlight, \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Hyperlight, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-11-13T11:09:16+00:00","article:modified_time":"2024-11-13T11:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120564","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:36:58","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:00:24","updated":"2026-02-09 17:36:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=120564"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120564\/revisions"}],"predecessor-version":[{"id":164222,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120564\/revisions\/164222"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/120565"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=120564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=120564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=120564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}