{"id":120564,"date":"2024-11-13T13:09:15","date_gmt":"2024-11-13T11:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah"},"modified":"2024-11-13T13:09:15","modified_gmt":"2024-11-13T11:09:16","slug":"microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","title":{"rendered":"Microsoft avas Hyperlight'i, hypervisor'i, etten\u00e4itlike funktsioonide eraldamiseks rakendustes.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsoft tutvustas projekti Hyperlight, mis arendab h\u00fcperviisorit, mis on m\u00f5eldud rakendustesse integreerimiseks, et isoleerida usaldamatut koodi v\u00f5i erikaitset vajavaid \u00fclesandeid. H\u00fcperviisor on kujundatud jagatud teegina, mis v\u00f5imaldab teatud funktsioonide t\u00e4itmist kergetes virtuaalmasinates (micro-VM) ning organiseerib nende funktsioonide vahelise andmevahetuse. Projekti kood on kirjutatud Rustis ja selle litsents on Apache 2.0. <\/p>\n

Traditsiooniliste k\u00e4ivitamisega v\u00f5rreldes virtuaalmasinad<\/a> Hyperlight v\u00f5imaldab saavutada madalat latentsust ja minimaalset \u00fclehead. Hyperlightis on virtuaalmasinate loomise latentsus 1-2 millisekundit, mis v\u00f5imaldab kasutada funktsioonide k\u00e4ivitamise tasemel isoleerimist. V\u00f5rdluseks, tavaliselt virtuaalmasina k\u00e4ivitamine kestab v\u00e4hemalt 120 millisekundit, samas kui isoleeritud sandbox-keskkonna k\u00e4ivitamine WebAssembly koodi t\u00e4itmiseks Wasmtime t\u00f6\u00f6tlustehnoloogia abil kestab 0,03 millisekundit. <\/p>\n

Linuxi platvormil toetatakse KVM ja mshv (Microsoft Hypervisor Azure Linuxis) h\u00fcperviisoreid, Windowsi platvormil aga WHP (Windows Hypervisor Platform) ja WSL2 (Windows Subsystem for Linux 2) koos KVM-iga. macOS platvorm ei ole veel toetatud. Eraldi tuum ja operatsioonis\u00fcsteem virtuaalmasinas<\/a> ole kasutusel. Virtuaalmasina koormus moodustatakse iseseisva laadimisprogrammina, mis sisaldab k\u00e4ivitatava funktsiooni koodi koos runtime'i \u00fcmbrise ja spetsialiseeritud minimaalsete s\u00fcdamikuga. Virtuaalmasinas kasutatakse \u00fchte lineaarset m\u00e4lufragmendi ning sellele on m\u00e4\u00e4ratud virtuaalne CPU, ilma seadmete kaardistamiseta ja ilma protsesside eraldamiseta. <\/p>\n

Arendamisprotsess p\u00f5hineb p\u00f5hikoodi sidumisel Hyperlight Host raamatukoguga, mis koordineerib virtuaalmasinate k\u00e4ivitamist, ja isoleeritud re\u017eiimis k\u00e4ivitatavate funktsioonide (k\u00fclaliste funktsioonide) koodi sidumisel Hyperlight Guest raamatukoguga, mis pakub API-d rakenduse v\u00e4lise poolega suhtlemiseks ning v\u00f5imalusi koodi eraldi k\u00e4itamiseks ilma ops\u00fcsteemi keskkonnata.

\"Microsoft<\/center> <\/p>\n

Pakutav kiht hostrakenduse ja isoleeritud funktsioonide vahel v\u00f5imaldab mitte ainult kutsuda isoleeritud funktsioone hostrakendustest, vaid ka vastupidi, p\u00e4\u00e4seda hostrakenduste funktsioonidele isoleeritud funktsioonidelt. V\u00e4listatud funktsioonide loetelu, mida on lubatud kutsuda isoleeritud funktsioonidelt, on rangelt reguleeritud. Vaikimisi on isoleeritud funktsioonide juurdep\u00e4\u00e4s piiratud minimaalsete API-dega, mis v\u00f5imaldavad edastada s\u00f5numeid hostrakendusele. <\/p>\n

Tulevikus plaanib Microsoft projekti \u00fcle anda mittetulundus\u00fchingule Cloud Native Computing Foundation (CNCF) \u00fchiseks arendamiseks neutraalses keskkonnas, mis ei ole s\u00f5ltuv erinevatest tootjatest. CNCF tegeleb Linux Foundationi all ja juhib selliste projektide arendamist nagu Kubernetes, etcd, Cilium, Containerd, cri-o, Flux, Helm, Istio ja gRPC.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Hyperlight, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d \u0432 \u0432\u0438\u0434\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 (micro-VM) \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0449\u0435\u0439 \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u044d\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120565,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120564","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft avas Hyperlighti, h\u00fcperviisori rakenduste erifunktsioonide isoleerimiseks | ProHoster","description":"Microsoft esitles projekti Hyperlight, mis arendab h\u00fcperviisorit, mis on m\u00f5eldud rakendustesse integreerimiseks, et isoleerida usaldamatut v\u00f5i erilist kaitset vajavat koodi. H\u00fcperviisor on vormistatud jagatud raamatukoguna, mis tagab erifunktsioonide t\u00e4itmise kergsuse virtuaalmasinates (micro-VM) ja korraldab andmevahetuse nende funktsioonidega. Projekti kood on kirjutatud keeles Rust ja seda levitatakse alusel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0440\u044b\u043b Hyperlight, \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Hyperlight, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d \u0432 \u0432\u0438\u0434\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 (micro-VM) \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0449\u0435\u0439 \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u044d\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-11-13T11:09:16+00:00","article:modified_time":"2024-11-13T11:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120564","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:36:58","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:00:24","updated":"2026-02-09 17:36:58"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=120564"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120564\/revisions"}],"predecessor-version":[{"id":164222,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120564\/revisions\/164222"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/120565"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=120564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=120564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=120564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}