Isolation Method Of Container Memory Bandwidth Based On Hardware Resource Management Technology

Container virtualization is becoming more and more popular.In a cloud environment,many applications use docker containers for execution.Compared with virtual machines,the method of using shared host kernels for containers is more prominent in performance,but it also sacrifices isolation.Memory bandwidth is a resource that is highly competitive among containers.In a multi-container environment,containers have different memory bandwidth sensitivity,some container workloads will excessively occupy memory bandwidth,and the requirement of other containers cannot be satisfied.As a result,the performance of some containers is severely degraded,and some containers are almost unaffected,that is,the unfairness of the system increases.Therefore,a memory bandwidth isolation mechanism that can reduce the unfairness of the container system is indispensable.At present,the isolation of docker containers is mainly guaranteed by Namespace and Cgroup,both of which cannot provide isolation of memory bandwidth.Many researches on the fairness of memory bandwidth isolation aimed to modify the hardware on simulator,which cannot be used on existing hardware platforms.The indirect method requires prior knowledge or modification of the scheduler,it is not suitable for general scenarios,and cannot reduce the unfairness of the system.To solve the problem of container memory bandwidth isolation under the existing commercial processor platform,a memory bandwidth isolation method of container was designed,which was combined with the hardware resource management technology of the Intel processor.And three different isolation policies are proposed,included static allocation,dynamically adjusting the threshold,and dynamically grouping.The proposal acts at two level: firstly,use the clustering algorithm to perform grouping operations according to the running status of the container.The optimal number of groups can be automatically calculated under the dynamic grouping strategy.And then the memory bandwidth threshold of each containers group is calculated according to the mathematical model.The containers are mapped to the corresponding threshold to complete the restriction on the memory bandwidth based on the hardware resource management technology.The experimental results show that the container memory bandwidth isolation method based on the hardware resource management technology can provide memory bandwidth isolation between containers,which can reduce system unfairness by up to 65% and by 32.9%on average.