Cao Lingling

Bio: Cao Lingling is an academic researcher. The author has contributed to research in topics: Hypervisor & Service quality. The author has an hindex of 1, co-authored 1 publications receiving 10 citations.

Multi-tenant performance isolation framework based on virtualization technology

Abstract: The invention discloses a multi-tenant performance isolation framework based on a virtualization technology. The isolation framework consists of a performance isolation subsystem, a dynamic resource manager, a virtual machine monitor, a virtual machine and a system resource pool. A method for erecting the isolation framework comprises the following steps: constructing a VM for each tenant by the virtualization technology, wherein the VM defines a boundary of logic resources of the corresponding tenant, and pre-distributing virtual resources for initializing the VM by adopting a virtual resource based on a tenant SLA; then monitoring and managing the service performance of each tenant under a logic isolation state, and controlling a response time boundary of each tenant by an access control mode; and finally, monitoring a service condition of each tenant, and implementing dynamic adjustment on the virtual resources of the tenants and maximization of total resource utilization. The performance isolation among all the tenants can be effectively guaranteed, and the service quality of the multiple tenants can be met; the reasonability of the resource use of all the tenants is realized, and the satisfaction degree of the tenants to the service is improved.

Resource management in cloud systems

Abstract: A method and apparatus are presented for allocating at least one virtual resource to a physical and/or software resource from a plurality of physical and/or software resources considering affinity information, which specifies whether or not a requested virtual resource may be collocated on the same physical and/or software resource with one or more virtual resources of tenants different from a first tenant.

Dynamic performance isolation of competing workloads on CPUs with shared hardware components

Abstract: A system and method for facilitating allocating computing resources to workloads, facilitating workload performance isolation. An example method includes determining one or more workloads to be allocated a set of computing resources in the computing environment, the one or more workloads characterized by metadata describing one or more workload properties; and using the one or more workload properties to calculate a binding between each of the one or more workloads and one or more corresponding portions of the computing resources. Plural competing workloads may be isolated by binding each workload to a disjunct set of Central Processing Units (CPUs) that share as few common hardware resources as possible given a topology the computing resources. Resource allocation adjustments need not require any reconfiguration of the system or adjustment to already provisioned workloads.

Ultra-lightweight virtual machine-based cloud computing dynamic resource scheduling system and method

Abstract: The invention discloses an ultra-lightweight virtual machine-based cloud computing dynamic resource scheduling system and method The method comprises the steps of collecting a virtual resource index of each application instance from a cloud computing environment, and predicting the time when a virtual resource of one application instance reaches a usage rate upper limit by using a prediction function with a minimum error as a prediction function of the application instance through a fitting function; performing task ranking on each application instance subjected to resource dynamic allocation according to the predicted upper limit time and a signed SLA protocol; and scheduling the application instance selected in a task queuing module to a demander according to a ranking sequence, and recovering the virtual resource, of which the usage rate already exceeds a lower limit, of an application, thereby realizing resource dynamic allocation According to the system and the method, the resource balanced use is realized more efficiently, satisfactory load balancing is achieved under low consumption, and the comprehensive efficiency of resource scheduling is improved

Method and arrangement for configuring a secure domain in a network functions virtualization infrastructure

Abstract: It is disclosed a method, an arrangement (50; 60) and a computer program for configuring a secure domain, SD, in a network functions virtualization infrastructure. The SD comprises virtual objects handling privileged information. NS instance information of a virtual object is obtained (S310, 402) based on input from a party associated with the SD. The NS instance information is searched (S312, 404) for a level of confidentiality and a geographic location information. When having identified the level of confidentiality and the geographic location information, the virtual object is allocated (S314, 406) to the SD according to the geographic location information, based on the level of confidentiality and a specific role of the party. It is an advantage that access to a SD is allowed or granted based on the specific role of the party.

Multi-tenant environment using pre-readied trust boundary components

Abstract: The low latency use of a multi-tenancy environment. To protect against hostility between tenants within different trust domains, tenant(s) of a common trust domain are run within a trust boundary component. Thus, there is security to protect against potential hostility between tenants of different trust domains. In order to quickly start up trust boundary components, there are multiple pre-readied (e.g., initialized, pre-booted, and/or snapshotted) trust boundary components that may be started up quickly when a new trust boundary is to be established. Processes within the trust boundary component may additionally be run within a resource container that facilitates allocation of resources amongst the various processes. Because trust boundary components may be started up quickly, the multi-tenancy environment may have security (as provided by the trust boundary components) while still being lower latency (due to the fast availability of pre-readied trust boundaries).