Scale and performance in the Denali isolation kernel

摘要: This paper describes the Denali isolation kernel, an operating system architecture that safely multiplexes a large number of untrusted Internet services on shared hardware. Denali's goal is to allow new be "pushed" into third party infrastructure, relieving service authors from burden acquiring and maintaining physical infrastructure. Our kernel exposes virtual machine abstraction, but unlike conventional monitors, does not attempt emulate underlying precisely, instead modifies gain scale, performance, simplicity implementation. In this paper, we first discuss design principles kernels, then describe implementation Denali. Following this, present detailed evaluation Denali, demonstrating overhead virtualization small, our architectural choices are warranted, can successfully scale more than 10,000 machines commodity