摘要
针对虚拟化环境下宿主机中的驱动程序故障容易造成宿主机及其虚拟机崩溃的问题,提出了一种采用驱动隔离的宿主机可靠性方法。该方法基于StyleBox架构的保护域功能,将其扩展用于复杂接口的驱动程序的隔离,包括:为驱动和内核的复杂交互接口建立包装函数,从而限定驱动程序运行在保护域中;为驱动程序提供私有内存,以保证驱动程序能够在保护域内正常运行。实验结果表明:在利用该方法修改的Linux2.6.28.10宿主机内核中,对于随机注入网卡驱动并造成内核破坏的错误,该方法可以有效检测90.63%的注入错误,并成功隔离67.5%的注入错误,防止了驱动故障传播到宿主机内核,提高了宿主机的可靠性。
An approach to improve the reliability of the host machines with driver isolation is proposed to solve the problem that the driver fault crashes the host machines and its virtual machines.The approach is based on the protection domain of the pre-developed architecture StyleBox and extends it to isolate the driver with complex interfaces.For detail,it creates wrapper functions for the complex interactive interfaces between the driver and the kernel,limits the driver running in the protection domain,and provides private memories for isolated drivers to support the driver's normal operation in the protection domain.Experimental results on a Linux2.6.28.10 host machine kernel that is modified using the proposed approach show that the approach successfully detects 90.63% of the faults,which are randomly injected to the network driver and damage the host machines kernel,and isolates 67.5% of them,and that the reliability of host machines is improved.
出处
《西安交通大学学报》
EI
CAS
CSCD
北大核心
2013年第10期7-12,24,共7页
Journal of Xi'an Jiaotong University
基金
国家"863计(2008AA01A202
2011AA01A204)
国家科技攻关计划资助项目(2011BAH04B03)
关键词
可靠性
虚拟化
驱动隔离
宿主机
reliability
virtualization
driver isolation
host machine