基于PCPEC的数据中心功耗攻击防御策略

Data Center Power Attack Defense Strategy Based on PCPEC

当前数据中心广泛应用多租户、容器化、虚拟化等技术进行服务器聚合与资源复用,并通过服务器资源与电力资源的超售(Oversubscription)进一步提高资源利用率。但是,资源与电力超售使得数据中心服务器在尖峰负载(Workload Bursts)时面临功耗过载的威胁。因此,功耗攻击(Power Attack,即电力攻击)通过运行恶意程序来增加服务器设备的功耗,使之达到或超过配电系统功耗极限值,引起服务器故障或断路器跳闸,甚至导致整个数据中心供电系统中断。为了降低数据中心遭受功耗攻击的风险,文中提出了基于性能等价资源配置的功耗封顶方法PCPEC,该方法利用虚拟机在不同配置下功耗的差异性进行虚拟机配置等效替换,以实现功耗管控。实验结果表明,PCPEC方法可以使服务器的动态功耗降低22.2%~29.6%,且大部分虚拟机在进行资源配置替换后性能均呈上升趋势,最大提升了2.12%,从而有效减小了功耗攻击对数据中心带来的影响。

Currently,due to the wide application of multi-tenancy,containerization,virtualization and power over-subscription in data centers,the possibility of power attack is becoming increasingly higher.The main means of power attack is to run malicious codes to increase the power consumption of servers,storage device and network equipment to exceed the power limit of a distribution system.And it causes server failure or circuit breaker trip,or even the interruption of the power supply system of the data centers.In order to reduce the risk of power attack on data center,this paper proposes a power capping method of performance equivalence configuration(PCPEC).This method takes advantage of the difference of power consumption in different configurations of virtual machines to implement the equivalent replacement of virtual machine configuration.Experiment result shows that PCPEC can reduce the dynamic power consumption of the server by 22.2%~29.6%,and the performance of most virtual machines increases by 2.12%after the replacement of resource configuration,thus effectively reducing the impact of power attack on the data center.