Amazon ebipụtala Firecracker 1.0 virtualization system

Amazon ewepụtala nnukwu mwepụta nke Firecracker 1.0.0, ihe ngosi igwe mebere emebere (VMM) nke e mere iji rụọ ọrụ igwe mebere emebere na-enweghị oke ibu ọrụ. Firecracker bụ ọrụ CrosVM nke Google ji eme ngwa. Linux и Android Amazon Web Services mepụtara Firecracker iji melite arụmọrụ na arụmọrụ nke nyiwe AWS Lambda na AWS Fargate. E dere Firecracker na Rust ma nye ikike n'okpuru ikike Apache 2.0.

Firecracker na-enye igwe mebere igwe dị fechaa akpọrọ microVMs. Maka ikewapụ microVM zuru oke, a na-eji teknụzụ virtualization ngwaike dabere na KVM hypervisor, mana n'otu oge ahụ a na-enye arụmọrụ na mgbanwe n'ogo nke arịa. Usoro dị maka x86_64 na ARM64 architectures, a nwalere ya na CPU site na Intel Skylake, Intel Cascade Lake, AMD Zen2 na ARM64 Neoverse N1 ezinụlọ. A na-enye ngwaọrụ iji tinye Firecracker n'ime sistemu nchekwa akpa oge dị ka Kata Containers, Weaveworks Ignite, na akpadebere (nke a na-enye site na ngwa ihe ọkụ na-agba ọsọ oge).

Amazon ebipụtala Firecracker 1.0 virtualization system

Emere n'ime igwe mebere A na-ewepụ ihe dị na gburugburu ngwanrọ ahụ ma nwee naanị obere ihe dị iche iche. Iji chekwaa ebe nchekwa, belata oge mmalite, ma melite nchekwa, kernel a na-ewepụ ihe na-agba ọsọ na gburugburu ndị a. Linux (a na-akwado kernels 4.14 na 5.10), nke ewepụrụ ihe niile na-adịghị mkpa, gụnyere mbelata ọrụ na iwepụ nkwado ngwaọrụ.

Mgbe ị na-eji kernel gbatuo agba ọsọ, oriri ebe nchekwa agbakwunyere ma e jiri ya tụnyere akpa na-erughị 5 MB. Ekwuru na igbu oge site na oge a malitere microVM na mmalite nke ngwa ngwa, a na-ekwu na ọ ga-esi na 6 ruo 60 ms (nkezi 12 ms), nke na-enye ohere ịmepụta igwe ọhụrụ mebere nke nwere ike ruru 180 gburugburu kwa nkeji na onye ọbịa. na 36 CPU cores.

Iji jikwaa gburugburu mebere na oghere onye ọrụ, usoro ndabere Virtual Machine Manager na-agba ọsọ, na-enye API RESTful nke na-arụ ọrụ dị ka nhazi, ịmalite na ịkwụsị microVM, ịhọrọ ndebiri CPU (C3 ma ọ bụ T2), na-ekpebi ọnụọgụ nke mebere processors (vCPU) na nha ebe nchekwa, na-agbakwunye oghere netwọkụ na akụkụ diski, na-etinye oke na ntinye na ike nke arụ ọrụ, na-enye ebe nchekwa ọzọ na ike CPU ma ọ bụrụ na enweghi ihe onwunwe zuru oke.

Na mgbakwunye na iji ya dị ka oyi akwa dịpụrụ adịpụ maka arịa, Firecracker dịkwa mma maka ike sistemu FaaS (Ọrụ dị ka Ọrụ), nke na-enye usoro mgbakọ na mwepụ na-enweghị nkesa nke a na-eme mmepe na ọkwa nke ịkwadebe otu obere mmadụ. ọrụ, nke ọ bụla n'ime ha na-ejikwa otu ihe omume ma mee ya maka ọrụ dịpụrụ adịpụ na-enweghị ntụaka na gburugburu ebe obibi (enweghị obodo, nsonaazụ ya adabereghị na steeti gara aga na ọdịnaya nke usoro faịlụ). A na-amalite ọrụ naanị mgbe mkpa bilitere na ozugbo nhazi ihe omume ahụ, ha rụchaa ọrụ ha. Ikpokoro FaaS n'onwe ya na-akwado ọrụ ndị akwadoro, na-ahazi njikwa ma hụ na ịchacha gburugburu ebe a chọrọ iji rụọ ọrụ akwadoro.

Na mgbakwunye, anyị nwere ike ịhụ mbipụta nke Intel nke Cloud Hypervisor 21.0 hypervisor, nke e wuru na ndabere nke akụkụ nke ọrụ nkwonkwo Rust-VMM, nke, na mgbakwunye na Intel, Alibaba, Amazon, Google na Red Hat na-esonye. Edere Rust-VMM n'asụsụ Rust ma na-enye gị ohere ịmepụta hypervisors akọwapụtara ọrụ. Cloud Hypervisor bụ otu hypervisor dị otú ahụ nke na-enye ihe nleba anya igwe mebere igwe dị elu (VMM) na-agba ọsọ n'elu KVM ma kachasị maka ọrụ igwe ojii. Koodu oru ngo dị n'okpuru ikike Apache 2.0.

Igwe ojii Hypervisor lekwasịrị anya n'ịgbasa nkesa ọgbara ọhụrụ Linux Iji ngwaọrụ paravirtualized dabere na Virtio. Ebumnuche ndị bụ isi gụnyere nzaghachi dị elu, obere oriri ebe nchekwa, arụmọrụ dị elu, nhazi dị mfe, na mbelata vektọ mwakpo. A na-ebelata nkwado emulation, na-elekwasị anya na paravirtualization. Usoro nhazi akwadoro bụ x86_64 na AArch64. Naanị ihe owuwu 64-bit ka akwadoro ugbu a maka ndị ọbịa. LinuxA na-eme nhazi CPU, ebe nchekwa, PCI, na NVDIMM n'oge usoro nrụpụta. sava.

Ụdị ọhụrụ nke Cloud Hypervisor na-ewebata mbugharị ndụ dị irè n'ógbè, nke enwere ike iji kwalite gburugburu ebe obibi n'oge njem (Nwelite Ndụ). Ụdị ọhụrụ a na-egbochi ntụnyere ebe nchekwa n'etiti ebe isi mmalite na ebe ebumnuche, na-ebelata oge nkwalite n'oge njem site na sekọnd 3 ruo 50 ms. Kernel akwadoro bụ Linux 5.15 (5.14 nwere nsogbu na virtio-net).

isi: opennet.ru

Zụta nnabata ntụkwasị obi maka saịtị nwere nchekwa DDoS, sava VPS VDS 🔥 Zụta ebe nrụọrụ weebụ a pụrụ ịtụkwasị obi na nchekwa DDoS, sava VPS VDS | ProHoster