Can I read Quark: A High-Performance Secure Container Runtime for Serverless Computing on EtoBox?

Quark: A High-Performance Secure Container Runtime for Serverless Computing by Zhao, Chenxingyu; Sun, Yulin; Xiong, Ying; Krishnamurthy, Arvind is a scholarly article available to read on EtoBox.

What is Quark: A High-Performance Secure Container Runtime for Serverless Computing about?

Secure container runtimes serve as the foundational layer for creating and running containers, which is the bedrock of emerging computing paradigms like microservices and serverless computing. Although existing secure container runtimes indeed enhance security via running containers over a guest kernel and a Virtual Machine Monitor (VMM or Hypervisor), they incur performance penalties in critical areas such as networking, container startup, and I/O system calls. In our practice of operating microservices and serverless computing, we build a high-performance secure container runtime named Quark. Unlike existing solutions that rely on traditional VM technologies by importing Linux for the guest kernel and QEMU for the VMM, we take a different approach to building Quark from the ground up, paving the way for extreme customization to unlock high performance. Our development centers on co-designing a custom guest kernel and a VMM for secure containers. To this end, we build a lightweight guest OS kernel named QKernel and a specialized VMM named QVisor. The QKernel-QVisor codesign allows us to deliver three key advancements: high-performance RDMA-based container networking, fast containe

Author

Zhao, Chenxingyu; Sun, Yulin; Xiong, Ying; Krishnamurthy, Arvind

Published

2023

Language

EN