Imperial College London
Portrait Picture

ProfessorPeterPietzuch

Faculty of Engineering, Department of Computing

Professor of Distributed Systems
 
 
 
//

Contact

 

+44 (0)20 7594 8314prp Website

 
 
//

Location

 

442Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Citation

BibTex format

@inproceedings{Sartakov:2022,
author = {Sartakov, VA and Vilanova, L and Eyers, D and Shinagawa, T and Pietzuch, P},
pages = {597--612},
title = {CAP-VMs: Capability-based isolation and sharing in the cloud},
url = {https://www.usenix.org/conference/osdi22/presentation/sartakov},
year = {2022}
}
Download

RIS format (EndNote, RefMan)

TY  - CPAPER
AB  - Cloud stacks must isolate application components, while permitting efficient data sharing between components deployed on the same physical host. Traditionally, the MMU enforces isolation and permits sharing at page granularity. MMU approaches, however, lead to cloud stacks with large TCBs in kernel space, and page granularity requires inefficient OS interfaces for data sharing. Forthcoming CPUs with hardware support for memory capabilities offer new opportunities to implement isolation and sharing at a finer granularity. We describe cVMs, a new VM-like abstraction that uses memory capabilities to isolate application components while supporting efficient data sharing, all without mandating application code to be capability-aware. cVMs share a single virtual address space safely, each having only capabilities to access its own memory. A cVM may include a library OS, thus minimizing its dependency on the cloud environment. cVMs efficiently exchange data through two capability-based primitives assisted by a small trusted monitor: (i) an asynchronous read/write interface to buffers shared between cVMs; and (ii) a call interface to transfer control between cVMs. Using these two primitives, we build more expressive mechanisms for efficient cross-cVM communication. Our prototype implementation using CHERI RISC-V capabilities shows that cVMs isolate services (Redis and Python) with low overhead while improving data sharing.
AU  - Sartakov,VA
AU  - Vilanova,L
AU  - Eyers,D
AU  - Shinagawa,T
AU  - Pietzuch,P
EP  - 612
PY  - 2022///
SP  - 597
TI  - CAP-VMs: Capability-based isolation and sharing in the cloud
UR  - https://www.usenix.org/conference/osdi22/presentation/sartakov
UR  - http://hdl.handle.net/10044/1/104895
ER  -
Download