Fast and Scalable VMM Live Upgrade in Large Cloud Infrastructure

Abstract

High availability is the most important and challenging problem for cloud providers. However, virtual machine monitor (VMM), a crucial component of the cloud infrastructure, has to be frequently updated and restarted to add security patches and new features, undermining high availability. There are two existing live update methods to improve the cloud availability: kernel live patching and Virtual Machine (VM) live migration. However, they both have serious drawbacks that impair their usefulness in the large cloud infrastructure: kernel live patching cannot handle complex changes (e.g., changes to persistent data structures); and VM live migration may incur unacceptably long delays when migrating millions of VMs in the whole cloud, for example, to deploy urgent security patches. In this paper, we propose a new method, VMM live upgrade, that can promptly upgrade the whole VMM (KVM & QEMU) without interrupting customer VMs. Timely upgrade of the VMM is essential to the cloud because it is both the main attack surface of malicious VMs and the component to integrate new features. We have built a VMM live upgrade system called Orthus. Orthus features three key techniques: dual KVM, VM grafting, and device handover. Together, they enable the cloud provider to load an upgraded KVM instance while the original one is running and "cut-and-paste" the VM to this new instance. In addition, Orthus can seamlessly

Fine-Grained Fault Tolerance for Resilient pVM-Based Virtual Machine Monitors

“…Some recent projects aim at supporting live reboot and/or upgrade of VMMs without disrupting the VMs [36], [37]. These techniques are focused on code updates for improving the safety and security of the hypervisor component.…”

Next-generation Blockchain-Enabled Virtualized Cloud Security Solutions: Review and Open Challenges

“…These attacks include VM creation, VM manipulation, VM deletion, resource quota amendment and changes etc. the attacker can also play with access privileges allocated to explicit VMs [47].…”

“…Dos attacks can also be applied against hypervisor, where attacker intends to utilize maximum resources and services memory, bandwidth, CPU cycles etc. to degrade the performance of cloud environment, by leveraging hypervisor's design flaws and misconfigurations [47]. DoS attacks can also occur because of the weaknesses in various communication protocols like TCP Sessions hijacking, IP Spoofing, and Corrupting DNS Server Cache.…”

Rebooting Virtualization Research (Again)

“…In contrast, current approaches are based on different assumptions: low-level solutions (BIOSes/OSes) are efficient but only support a fixed capacity and a limited set of resources that are known a priori, whereas higher-level solutions employed in distributed systems are more flexible but have more overheads and are not designed for the same time scales. Some of these issues might nonetheless be alleviated by leveraging recent approaches such as live hypervisor upgrade solutions [35].…”