{"id":120564,"date":"2024-11-13T13:09:15","date_gmt":"2024-11-13T11:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah"},"modified":"2024-11-13T13:09:15","modified_gmt":"2024-11-13T11:09:16","slug":"microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","title":{"rendered":"Microsoft a lansat Hyperlight, un hypervizor pentru izolarea func\u021biilor individuale \u00een aplica\u021bii.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Microsoft a prezentat proiectul Hyperlight, care dezvolt\u0103 hipervizorul destinat \u00eencorpor\u0103rii \u00een aplica\u021bii pentru execu\u021bia izolat\u0103 a codului care nu este de \u00eencredere sau care necesit\u0103 protec\u021bie special\u0103. Hipervizorul este implementat sub form\u0103 de bibliotec\u0103 partajat\u0103, asigur\u00e2nd execu\u021bia unor func\u021bii \u00een ma\u0219ini virtuale u\u0219oare (micro-VM) \u0219i organiz\u00e2nd schimbul de date cu aceste func\u021bii. Codul proiectului este scris \u00een limbajul Rust \u0219i este distribuit sub licen\u021ba Apache 2.0. <\/p>\n

Comparativ cu lansarea tradi\u021bional\u0103 a ma\u0219ini virtuale<\/a> Hyperlight permite ob\u021binerea unor \u00eent\u00e2rzieri reduse \u0219i a unor costuri minime. \u00cen Hyperlight, \u00eent\u00e2rzierile la crearea ma\u0219inilor virtuale sunt de 1-2 milisecunde, ceea ce permite aplicarea izol\u0103rii la nivel de execu\u021bie a func\u021biilor. Spre compara\u021bie, lansarea unei ma\u0219ini virtuale normale se realizeaz\u0103 \u00een cel pu\u021bin 120 de milisecunde, iar lansarea unui mediu izolat sandbox pentru execu\u021bia codului WebAssembly utiliz\u00e2nd runtime-ul Wasmtime dureaz\u0103 0,03 milisecunde. <\/p>\n

Pentru izolare pe platforma Linux se suport\u0103 utilizarea hypervisorilor KVM \u0219i mshv (Microsoft Hypervisor \u00een Azure Linux), iar pe platforma Windows \u2014 WHP (Windows Hypervisor Platform) \u0219i WSL2 (Windows Subsystem for Linux 2) cu KVM. Platforma macOS nu este \u00eenc\u0103 suportat\u0103. Un nucleu \u0219i un sistem de operare separate \u00een ma\u0219ina virtual\u0103<\/a> nu sunt utilizate. Configura\u021bia pentru ma\u0219ina virtual\u0103 este format\u0103 sub form\u0103 de program de \u00eenc\u0103rcare autonom, incluz\u00e2nd codul func\u021biei care este executat\u0103 \u00eenf\u0103\u0219urat \u00eentr-un runtime \u0219i un nucleu minim specializat. \u00cen ma\u0219ina virtual\u0103, se folose\u0219te un singur fragment liniar de memorie \u0219i se aloc\u0103 un CPU virtual, f\u0103r\u0103 maparea dispozitivelor \u0219i f\u0103r\u0103 \u00eemp\u0103r\u021bire \u00een procese. <\/p>\n

Procesul de dezvoltare se bazeaz\u0103 pe legarea codului principal al aplica\u021biei cu biblioteca Hyperlight Host, care coordoneaz\u0103 lansarea ma\u0219inilor virtuale, iar codul func\u021biilor executate \u00een mod izolat (func\u021bii guest) cu biblioteca Hyperlight Guest, care ofer\u0103 un API pentru interac\u021biunea cu partea extern\u0103 a aplica\u021biei \u0219i oportunit\u0103\u021bi pentru execu\u021bia separat\u0103 a codului f\u0103r\u0103 un mediu de sistem de operare.

\"Microsoft<\/center> <\/p>\n

Stratul furnizat pentru interac\u021biunea dintre aplica\u021bia gazd\u0103 \u0219i func\u021biile izolate permite nu doar apelarea func\u021biilor izolate din aplica\u021biile gazd\u0103, ci \u0219i invers, accesarea func\u021biilor aplica\u021biilor gazd\u0103 din func\u021biile izolate. Lista func\u021biilor externe permise pentru apel din func\u021biile izolate este strict reglementat\u0103. \u00cen mod implicit, accesul din func\u021biile izolate este restric\u021bionat la un API minim, care permite transmiterea de mesaje aplica\u021biei gazd\u0103. <\/p>\n

\u00cen viitor, Microsoft inten\u021bioneaz\u0103 s\u0103 transfere proiectul unei organiza\u021bii non-profit, Cloud Native Computing Foundation (CNCF), pentru dezvoltare comun\u0103 pe o platform\u0103 neutr\u0103, independent\u0103 de anumite furnizori. Organiza\u021bia CNCF func\u021bioneaz\u0103 sub egida Linux Foundation \u0219i supravegheaz\u0103 dezvoltarea unor proiecte precum Kubernetes, etcd, Cilium, Containerd, cri-o, Flux, Helm, Istio \u0219i gRPC.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Hyperlight, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d \u0432 \u0432\u0438\u0434\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 (micro-VM) \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0449\u0435\u0439 \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u044d\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120565,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120564","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft a lansat Hyperlight, un hipervizor pentru izolarea func\u021biilor individuale \u00een aplica\u021bii | ProHoster","description":"Compania Microsoft a prezentat proiectul Hyperlight, care dezvolt\u0103 un hipervizor destinat integr\u0103rii \u00een aplica\u021bii pentru executarea izolat a codului care nu este de \u00eencredere sau care necesit\u0103 o protec\u021bie special\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0440\u044b\u043b Hyperlight, \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Hyperlight, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkryl-hyperlight-gipervizor-dlya-izolyaczii-otdelnyh-funkczij-v-prilozheniyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-11-13T11:09:16+00:00","article:modified_time":"2024-11-13T11:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120564","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:36:58","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:00:24","updated":"2026-02-09 17:36:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=120564"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120564\/revisions"}],"predecessor-version":[{"id":164222,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120564\/revisions\/164222"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/120565"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=120564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=120564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=120564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}