El-Anani, Bashar Ramadan · Theseus (Ammattikorkeakoulujen) · 2021
The purpose of this thesis was to implement testing environment through building bare metal Citrix XenServer and Kernel-based Virtual Machine (KVM) hypervisors and create one virtual machine on each hypervisor to examine the performance of full virtualization and paravirtualization technologies. \n \nA seven-year-old tower server Fujitsu Primergy TX150 S8 with Xeon E5-2407 2.2 GHz processor, 16 GB RAM, 145 GB hard drive and one 1 Gb NIC was used to host hypervisors. Different virtual machine managers were introduced and discussed. After virtual machines creation, Phoronix test suite program was used to test processors and memory performance, while iPerf software was used for network performance tests. \n \nPerformance test results were collected and analyzed. Citrix XenServer virtual machine results showed better performance scores than KVM results. \n \nIn conclusion, the results proved that full virtualization performance is slower than paravirtualization performance. Although the bare metal hypervisors were built successfully and reflected good performance, it is not recommended to seek only free, used and old technology solutions, because much time would be wasted on deploying and maintaining the system. This project is suitable for IT learners and small companies’ internal operations.
Cited by 0Open access
Tom Spink, Harry Wagstaff, Björn Franke · ACM Transactions on Architecture and Code Optimization · 2016
Hardware virtualization solutions provide users with benefits ranging from application isolation through server consolidation to improved disaster recovery and faster server provisioning. While hardware assistance for virtualization is supported by all major processor architectures, including Intel, ARM, PowerPC, and MIPS, these extensions are targeted at virtualization of the same architecture, for example, an x86 guest on an x86 host system. Existing techniques for cross-architecture virtualization, for example, an ARM guest on an x86 host, still incur a substantial overhead for CPU, memory, and I/O virtualization due to the necessity for software emulation of these mismatched system components. In this article, we present a new hardware-accelerated hypervisor called C aptive , employing a range of novel techniques that exploit existing hardware virtualization extensions for improving the performance of full-system cross-platform virtualization. We illustrate how (1) guest memory management unit (MMU) events and operations can be mapped onto host memory virtualization extensions, eliminating the need for costly software MMU emulation, (2) a block-based dynamic binary translation engine inside the virtual machine can improve CPU virtualization performance, (3) memory-mapped guest I/O can be efficiently translated to fast I/O specific calls to emulated devices, and (4) the cost for asynchronous guest interrupts can be reduced. For an ARM-based Linux guest system running on an x86 host with Intel VT support, we demonstrate application performance levels, based on SPEC CPU2006 benchmarks, of up to 5.88× over state-of-the-art Q emu and 2.5× on average, achieving a guest dynamic instruction throughput of up to 1280 MIPS (million instructions per second) and 915.52 MIPS, on average.
Cited by 15Open access
Wei Chen, Hongyi Lu, Li Shen et al. · 2008
Virtual machine technology is rapidly emerging as an important component of future computer systems. Full virtualization with dynamic binary translation outperforms paravirtualization and hardware assisted virtualization in x86 CPU virtualization. Previous full virtualization techniques are implemented in software without any hardware assist. In this paper, for the first time, we propose a novel hardware assisted full virtualization technique-dynamic binary translation in DIMM (DBTIM). We integrate a reconfigurable dynamic binary translation chip into a DIMM. DBTIM could be inserted to the mainboard as a normal DIMM, hence easily making the host CPU virtualizable. We also implement a DBTIM prototype on FPGA. We analyze our new approach and compare it with other modern virtualization techniques. We demonstrate that the new technique in this paper could provide full virtualization to all kinds of CPU architectures, including x86, with better virtualization capability, better software and hardware compatibility, better performance and lower overheads.
Cited by 33
Karen Scarfone, Murugiah Souppaya, Paul Hoffman · 2011
Cited by 119
Konglin Zhu, Zhihan Yao, Ning He et al. · IEEE Systems Journal · 2018
With the emergence of new enabling technologies including software-defined networking and network function virtualization, network virtualization has been reemphasized in recent years, such as network slicing in 5G networks. As an important aspect of network virtualization, network topology virtualization is studied in this work-from traditional network embedding toward full network topology virtualization. By full virtualization, the tenant virtual network can specify whatever network topology without knowing the underlying physical network and get the same experience as building a physical network by his own. Based on the switches with a late-binding key extractor, not only one-to-one and many-to-one mapping, but also one-to-many mappings are enabled in full virtualization of network topologies. In this paper, we propose a restricted differential evolution topology virtualization algorithm to achieve efficient mapping from a virtual network to a physical network in full virtualization. Furthermore, migration approaches are carried out to tackle the mapping failure of the virtual network topology. The extensive evaluation results show that the proposed algorithms can accept 30% more virtual network requests and gain more than 25% profit for physical network operators compared with baseline mechanisms.
Cited by 14
Buhl, Hans Ulrich, Winter, Robert · Journal of the Association for Information Systems · 2011
Cited by 0Open access
Adriano Carvalho, Francisco Afonso, Paulo Cardoso et al. · 2013
As real-time embedded systems become overwhelmingly complex, hypervisor-based architectures are increasingly being used. Hypervisor-based architectures can support such level of complexity and, at the same time, provide real-time performance while reducing the size, cost and time-to-market of such systems. Modern processors provide cache facilities which can increase their performance substantially. Similarly, in hypervisor-based architectures, by providing virtual machines (VM) with such facilities a significant improvement in their performance can be obtained as we conclude in this work. This article presents a methodology to fully virtualize the cache facilities of the IBM PowerPC 405-S. To the best of our knowledge, this is the first time cache virtualization is openly described. A careful mapping between a VM's cache-related configuration and the processor's configuration is done, accompanied by the emulation of 5 cache-related privileged instructions. Even though some issues have been detected, a simple solution is provided for all of them. The results show that cache virtualization works with minimal virtualization overhead.
Cited by 1
2012
Cited by 0
Dwi Ahmad Reski, Nuruddin Alhaffaf, Yaqin, Muhammad Ainul · 2025
Cited by 0Open access
Eda Tabaku · European Journal of Computer Science and Information Technology · 2025
In the digital era, critical sectors like banking, ISPs, and cloud-based services depend on robust, secure networks to ensure uninterrupted service availability. Key operations such as financial transactions, customer support, and online services rely on high system uptime, essential for business continuity and customer trust. Network and server administrators play a vital role in maintaining high availability (HA) for systems like file servers, web servers, database servers, backup systems, and enterprise applications. HA infrastructures often use multiple servers working collaboratively to ensure continuous service. If one server fails, another takes over seamlessly, preventing significant disruptions. Virtualization technology enhances HA systems by hosting services on virtual machines (VMs) that can migrate between physical nodes within a cluster. This ensures uninterrupted service even during hardware failures. This paper examines the use of open-source tools for managing HA services, focusing on cost efficiency and system optimization. The Heartbeat program facilitates real-time VM migration across cluster nodes, maintaining service continuity. To improve this process, the Perf+ algorithm is introduced. Perf+ optimizes CPU performance, reduces memory usage, and minimizes downtime by transferring fewer bytes of modified memory pages during migration, reducing CPU and network load. The proposed solution is implemented in an experimental HA system to evaluate the performance of real-time VM migrations. The research analyzes the impact of these migrations on system efficiency, aiming to advance HA infrastructures in virtualized environments through optimized resource utilization and reduced operational interruptions.
Cited by 1Open access
Yang Hu, Mingcong Song, Tao Li · 2017
With exploding traffic stuffing existing network infra-structure, today's telecommunication and cloud service providers resort to Network Function Virtualization (NFV) for greater agility and economics. Pioneer service provider such as AT&T proposes to adopt container in NFV to achieve shorter Virtualized Network Function (VNF) provisioning time and better runtime performance. However, we characterize typical NFV work-loads on the containers and find that the performance is unsatisfactory. We observe that the shared host OS net-work stack is the main bottleneck, where the traffic flow processing involves a large amount of intermediate memory buffers and results in significant last level cache pollution. Existing OS memory allocation policies fail to exploit the locality and data sharing information among buffers. In this paper, we propose NetContainer, a software framework that achieves fine-grained hardware resource management for containerized NFV platform. NetContainer employs a cache access overheads guided page coloring scheme to coordinately address the inter-flow cache access overheads and intra-flow cache access overheads. It maps the memory buffer pages that manifest low cache access overheads (across a flow or among the flows) to the same last level cache partition. NetContainer exploits a footprint theory based method to estimate the cache access overheads and a Min-Cost Max-Flow model to guide the memory buffer mappings. We implement the NetContainer in Linux kernel and extensively evaluate it with real NFV workloads. Exper-imental results show that NetContainer outperforms conventional page coloring-based memory allocator by 48% in terms of successful call rate.
Cited by 29Open access
Kerstan, Timo · Habilitation Regulations of the Faculty of Mechanical Engineering (University of Paderborn) · 2011
Die zunehmende Komplexität und die Forderung nach Schnittstellen auf höchster Ebene bei eingebetteten harten Echtzeitsystemen führt zu gegensätzlichen Zielen bei der Entwicklung der unterliegenden Systemsoftware. Das Hinzufügen weiterer Funktionalität auf höchster Ebene gefährdet die typischen Eigenschaften eingebetteter harter Echtzeitsysteme. Auf der anderen Seite ist die Implementierung von Funktionalität zum Ausführen von Systemen unter harter Echtzeit in nicht echtzeitfähigen Betriebssystemen nicht möglich, da diese aufgrund ihrer vorhandenen Implementierung oft nicht deterministisches Verhalten aufweisen. Heutige Oberklassenfahrzeuge enthalten allerdings mittlerweile mehr als 70 eingebettete Steuereinheiten (ECUs). Es stellt sich also die Frage, wie man dieser zunehmenden Komplexität Herr wird. Werden aus diesem Grund zukünftige Fahrzeuge noch mehr ECUs enthalten oder werden leistungsfähigere ECUs die Funktionalitäten mehrere ECUs in sich vereinen, weil die wachsende Zahl von ECUs nicht mehr adäquat handhabbar ist. Blickt man in Richtung des Einsatzes leistungsfähigerer ECUs, so tauchen die Konflikte der Designziele von eingebetteten har\\-ten Echtzeitsystemen und Betriebssystemen mit Funktionalität auf höchster Ebene wieder auf. Denkt man an den Einsatz von Virtualisierung, ergeben sich daraus interessante Fragestellungen. Ist der Einsatz von Virtualisierung in der Lage, die widersprüchlichen Ziele in ein System zu integrieren, wobei die Anforderungen beider Systeme noch immer erhalten bleiben? Welches Paradigma der Virtualisierung ist am besten für eingebettete Echtzeitsysteme geeignet? Sämtliche Fragen bedürfen einer Antwort, wenn Virtualisierung als mögliches Lösungsparadigma in Betracht gezogen wird, um dem Design komplexer verteilter eingebetteter harter Herr zu werden.
Cited by 0Open access
Nils Schmidt, Lars Baumgärtner, Patrick Lampe et al. · 2017
In this paper, we present MiniWorld, a novel distributed network emulator. It is based on full virtualization using QEMU/KVM, offers three network backends for emulating both wired and wireless communication, and provides several mobility patterns as well as distance-based link quality models. A snapshot boot mode is offered for accelerated booting of identical environments and repeating emulation runs. To decrease runtimes, MiniWorld supports distributed emulation across multiple computers, based on a resource-aware virtual machine (VM) scheduler. Experimental results demonstrate the performance of MiniWorld with respect to VM boot times, network bandwidth, round trip times, and topology switching times.
Cited by 4
Rakesh Rathi, Dinesh Kumar Jain, Richa Mishra · 2012
Cited by 0
Hasan Fayyad-Kazan, Luc Perneel, Martin Timmerman · 2013
Xen is one of the most popular open-source virtualization software’s. It supports the two leading virtualization approaches, Full-Virtualization (FV) and Para-Virtualization (PV).Searching the public resources for performance comparison between these two approaches shows that PV performs the best. But most of the answers are theoretical, based on the implementation of both. For instance, Xen community states the following: “PV delivers higher performance than full virtualization because the operating system and hypervisor work together more efficiently, without the overhead imposed by the emulation of the system's resources”.This paper presents an experimental work based on tests and scenarios to compare the quantitative performance between PV and FV. The quantitative results show indeed the predicted performance gap.
Cited by 14
Anant V. Nimkar, Soumya K. Ghosh · Greater South Information System · 2013
Horizontal IaaS federation exploits datacenter for federation of IaaS provider by supplying virtual nodes (e.g. virtual machines, virtual switches, and virtual routers) and virtual links. Today's datacenters for cloud computing do not supply full network virtualization in terms of user-level network management and user-agreed network topology. The datacenters lack the basic security services required for the collocation of tenants' virtual networks. The network virtualization research projects from academia and industry support full network virtualization but lack the basic security services required for the collocation of tenants' virtual networks. This paper investigates the security issues in four areas namely, (a) monolithic IaaS cloud, (b) network virtualization research projects, (c) datacenter network virtualization and (d) virtual resources to incorporate full network virtualization environment in horizontal IaaS federation. Further, it presents the security related qualitative comparisons of datacenters, network virtualization research projects and virtual resources to incorporate full network virtualization in horizontal IaaS federation.
Cited by 0Open access
Hengli Zhao, Ning Zheng, Jian Li et al. · 2009
Malware has become the centerpiece of security threats on the e-commercial business. The focus of malware research is shifting from using signature patterns to identifying the malicious behavior patterns. Many researcher extract behavior pattern from system call sequences to identify malware from benign programs with data mining techniques. Most system call tracing tools must run alongside the malware in the same system environment and could be easily detected by malware. In this paper, we propose a new system calls tracing system based on the full virtualization via Intel-VT technology. Malicious samples are running in a GuestOS and they can not detect the existence of system call tracing tool running in the HostOS. We collect a system call trace data set from 1226 malicious and 587 benign executables. An experiment based on the SVM model shows that the proposed method can detect malware with strong resilience and high accuracy.
Cited by 7
Anant V. Nimkar, Soumya K. Ghosh · Greater South Information System · 2013
Horizontal IaaS federation exploits datacenter for federation of IaaS provider by supplying virtual nodes (e.g. virtual machines, virtual switches, and virtual routers) and virtual links. Today's datacenters for cloud computing do not supply full network virtualization in terms of user-level network management and user-agreed network topology. The datacenters lack the basic security services required for the collocation of tenants' virtual networks. The network virtualization research projects from academia and industry support full network virtualization but lack the basic security services required for the collocation of tenants' virtual networks. This paper investigates the security issues in four areas namely, (a) monolithic IaaS cloud, (b) network virtualization research projects, (c) datacenter network virtualization and (d) virtual resources to incorporate full network virtualization environment in horizontal IaaS federation. Further, it presents the security related qualitative comparisons of datacenters, network virtualization research projects and virtual resources to incorporate full network virtualization in horizontal IaaS federation.
Cited by 0Open access
Katharina Gilles, Stefan Groesbrink, Daniel Baldin et al. · IFIP advances in information and communication technology · 2013
Cited by 23Open access
Dirk von Wissel, Yohan Jordan, Dirk Von et al. · arXiv (Cornell University) · 2018
Virtualization allows the simulation of automotive ECUs on a Windows PC executing in closed-loop with a vehicle simulation model. This approach enables to move certain development tasks from road or test rigs and HiL (Hardware in the loop) to PCs, where they can often be performed faster and cheaper. Renault has recently established such a virtualization process for powertrain control software based on Simulink models. If the number of runnables exceeds a threshold (about 1500) the execution of the virtual ECU is no longer straight forward and specific techniques are required. This paper describes the motivation behind a Simulink model based process, the virtualization process and applications of the resulting virtual ECUs. Domain: Critical Transportation Systems Topic: Processes, methods and tools, in particular: virtual engineering and simulation 1. Motivation Since 2010, Renault has established a framework to develop engine control software for Diesel and Gasoline engines [6]. The framework is heavily based on MATLAB/Simulink and the idea of model-based development, which facilitates the carry-over and carry-across of application software between software projects. In the Renault EMS architecture software is composed in to about 20 functions, such as Air System, Combustion etc. A function consists of modules. A module is the smallest testable software unit and contains runnables to be scheduled and executed by the Operating System (Os) of the ECU. The Renault EMS development process includes basically the following steps [5]. 1. Specification of about 200 generic configurable modules per ECU using MATLAB/Simulink. 2. Generation of C code (EMS application software) from all module specifications using MATLAB/Simulink Embedded Coder. 3. MiL (Model in the Loop) test and validation of the resulting executable specifications at module level in a simulated system environment, considering only essential interactions with other modules and system environment. This is essentially a back-to-back test to make sure that the Simulink model of a module and the corresponding production C code show equivalent and intended behaviour. To insure software quality, this step is repeatedly performed with steps 1 and 2, based on the simulation capabilities of MATLAB/Simulink. 4. Configuration of modules to fit to the specific needs of a software project, such as absence or presence of certain components. 5. Integration of generated configured C code and hand-coded platform software (basic software) on supplied target hardware, a real ECU that communicates with other controllers via CAN and other busses. 6. Validation and test of all modules on system level using the real ECU. In contrast to step 3, the interactions of all modules and interactions with the system environment are visible then and subject to testing. For example, the Os runs all scheduled runnables then, not just those of the modules considered to be 'essential' for a module under test. Critical assessment of the above process shows that there is a considerable delay between delivery of a set of specifications to the software project team (at the end of step 3) and system-level tests based on an ECU that runs entire software (step 6). Typical delays are weeks or months.
Cited by 0Open access