Amazon e phatlalalitse Firecracker 1.0 virtualization system

Amazon e phatlalalitse tokollo e kholo ea Virtual Machine Monitor (VMM) ea eona, Firecracker 1.0.0, e etselitsoeng ho tsamaisa mechini e sebetsang e nang le hlooho e nyane haholo. Firecracker ke fereko ea morero oa CrosVM, o sebelisoang ke Google ho tsamaisa lits'ebetso tsa Linux le Android ho ChromeOS. Firecracker e ntse e ntlafatsoa ke Amazon Web Services ho ntlafatsa ts'ebetso le katleho ea liforomo tsa AWS Lambda le AWS Fargate. Khoutu ea Firecracker e ngotsoe ka Rust mme e na le laesense tlasa laesense ea Apache 2.0.

Firecracker e fana ka mechini e bobebe e bobebe e bitsoang li-microVM. Bakeng sa ho itšehla thajana ha microVM, ho sebelisoa theknoloji ea virtualization ea hardware e thehiloeng ho hypervisor ea KVM, empa ka nako e ts'oanang ts'ebetso le ho feto-fetoha ha maemo li fanoa boemong ba lijana tse tloaelehileng. Sistimi e fumaneha bakeng sa meralo ea x86_64 le ARM64, 'me e lekoa ho li-CPU ho tsoa ho Intel Skylake, Intel Cascade Lake, AMD Zen2 le ARM64 Neoverse N1 lelapa. Ho fanoe ka lisebelisoa tsa ho kopanya Firecracker ka har'a lisebelisoa tsa li-container tsa nako ea ho sebetsa tse kang Kata Containers, Weaveworks Ignite, le tse nang le lisebelisoa (tse fanoeng ke runtime firecracker-container).

Amazon e phatlalalitse Firecracker 1.0 virtualization system

Tikoloho ea software e sebetsang ka har'a mechini ea sebele e tlosoa 'me e na le likarolo tse fokolang feela. Ho boloka mohopolo, ho fokotsa nako ea ho qala le ho eketsa ts'ireletseho libakeng, ho qalisoa kernel ea Linux e hlobolisitsoeng (li-kernel 4.14 le 5.10 li tšehetsoa), moo ntho e 'ngoe le e' ngoe e sa hlokahaleng e sa kenyelletsoeng, ho kenyelletsa le ho fokotsa ts'ebetso le ts'ehetso ea lisebelisoa tse tlositsoeng.

Ha o sebetsa ka kernel e theohileng, tšebeliso e eketsehileng ea memori ha e bapisoa le setshelo e ka tlase ho 5 MB. Ho lieha ho tloha ha microVM e qala ho qala ts'ebetsong ea kopo ho boleloa hore e tloha ho 6 ho isa ho 60 ms (karolelano ea 12 ms), e lumellang ho thehoa ha mechine e mecha e nang le matla a ho fihlela ho 180 ka motsotsoana ho moamoheli. e nang le li-cores tse 36 tsa CPU.

Ho laola tikoloho ea sebele sebakeng sa mosebedisi, ts'ebetso ea morao-rao ea Virtual Machine Manager e sebetsa, e fana ka RESTful API e sebelisang mesebetsi e kang ho lokisa, ho qala le ho emisa microVM, ho khetha li-template tsa CPU (C3 kapa T2), ho khetholla palo ea li-processor tsa sebele (vCPU) le boholo ba memori, ho eketsa li-interfaces tsa marang-rang le likarolo tsa disk, ho beha meeli ea ho sebetsa le matla a ts'ebetso, ho fana ka mohopolo o eketsehileng le matla a CPU tabeng ea lisebelisoa tse sa lekaneng.

Ntle le ho sebelisoa e le sebaka se tebileng sa ho itšehla thajana bakeng sa lijana, Firecracker e boetse e loketse ho matlafatsa litsamaiso tsa FaaS (Function as a Service), tse fanang ka mohlala oa komporo o se nang seva oo nts'etsopele e etsoang sethaleng sa ho lokisa sete ea batho ba banyenyane. mesebetsi, e 'ngoe le e' ngoe e sebetsanang le ketsahalo e itseng 'me e etselitsoe ho sebetsa ka thōko ntle le ho bua ka tikoloho (e se nang boemo, sephetho ha se itšetlehe ka boemo bo fetileng le likahare tsa tsamaiso ea faele). Mesebetsi e qalisoa feela ha tlhokahalo e hlaha mme hang ka mor'a ho sebetsana le ketsahalo ba qeta mosebetsi oa bona. Sethala sa FaaS ka bosona se tšoara mesebetsi e lokisitsoeng, se hlophisa taolo le ho netefatsa ho eketseha ha maemo a hlokahalang ho etsa mesebetsi e lokisitsoeng.

Ho phaella moo, re ka hlokomela khatiso ea Intel ea Cloud Hypervisor 21.0 hypervisor, e hahiloeng motheong oa likarolo tsa morero o kopanetsoeng oa Rust-VMM, oo, ho phaella ho Intel, Alibaba, Amazon, Google le Red Hat le bona ba kopanelang. Rust-VMM e ngotsoe ka puo ea Rust 'me e u lumella ho etsa li-hypervisors tse khethehileng. Cloud Hypervisor ke e 'ngoe ea li-hypervisor tse joalo tse fanang ka mochine oa boemo bo holimo oa mochine (VMM) o sebetsang ka holim'a KVM mme o lokiselitsoe mesebetsi ea maruo. Khoutu ea projeke e fumaneha tlasa laesense ea Apache 2.0.

Cloud Hypervisor e tsepamisitse maikutlo ho tsamaiseng liphaello tsa Linux tsa sejoale-joale ho sebelisa lisebelisoa tsa paravirtualized tse thehiloeng ho virtio. Har'a merero e ka sehloohong e boletsoeng ke: ho arabela ho phahameng, tšebeliso e tlaase ea mohopolo, ts'ebetso e phahameng, tlhophiso e nolofalitsoeng le phokotso ea li-vector tse ka bang teng tsa tlhaselo. Tšehetso ea ho etsisa ha e fokotsehe 'me ho tsepamisitsoe maikutlo holim'a paravirtualization. x86_64 le meralo ea AArch64 lia tšehetsoa. Bakeng sa litsamaiso tsa baeti, ke meaho ea 64-bit feela ea Linux e tšehetsoang hajoale. CPU, memori, PCI le NVDIMM li hlophisitsoe sethaleng sa kopano. Hoa khoneha ho falla mechine ea sebele pakeng tsa li-server.

Mofuta o mocha oa Cloud Hypervisor o kenyelletsa bokhoni ba ho etsa phalliso e sebetsang ea lehae, e ka sebelisoang ho ntlafatsa tikoloho ka fofa (Live Upgrade). Mokhoa o mocha o khetholloa ka ho thibela papiso ea mohopolo ea mohloli le libaka tse lebisitsoeng, e leng ho fokotsang nako ea ts'ebetso ea ts'ebetso ea ho fofa ho tloha metsotsoana ea 3 ho ea ho 50 ms. Linux kernel e khothalletsoang ke 5.15 (5.14 e na le mathata a virtio-net).

Source: opennet.ru

Eketsa ka tlhaloso