一种采用驱动隔离的宿主机可靠性方法

Improving the Reliability of Host Machine with Driver Isolation

针对虚拟化环境下宿主机中的驱动程序故障容易造成宿主机及其虚拟机崩溃的问题,提出了一种采用驱动隔离的宿主机可靠性方法。该方法基于StyleBox架构的保护域功能,将其扩展用于复杂接口的驱动程序的隔离,包括:为驱动和内核的复杂交互接口建立包装函数,从而限定驱动程序运行在保护域中;为驱动程序提供私有内存,以保证驱动程序能够在保护域内正常运行。实验结果表明:在利用该方法修改的Linux2.6.28.10宿主机内核中,对于随机注入网卡驱动并造成内核破坏的错误,该方法可以有效检测90.63%的注入错误,并成功隔离67.5%的注入错误,防止了驱动故障传播到宿主机内核,提高了宿主机的可靠性。

An approach to improve the reliability of the host machines with driver isolation is proposed to solve the problem that the driver fault crashes the host machines and its virtual machines.The approach is based on the protection domain of the pre-developed architecture StyleBox and extends it to isolate the driver with complex interfaces.For detail,it creates wrapper functions for the complex interactive interfaces between the driver and the kernel,limits the driver running in the protection domain,and provides private memories for isolated drivers to support the driver＇s normal operation in the protection domain.Experimental results on a Linux2.6.28.10 host machine kernel that is modified using the proposed approach show that the approach successfully detects 90.63％ of the faults,which are randomly injected to the network driver and damage the host machines kernel,and isolates 67.5％ of them,and that the reliability of host machines is improved.