发表机构
Arizona State University; National University of Singapore(亚利桑那州立大学; 新加坡国立大学)
机构由 AI 辅助整理,请以论文原文为准。AI 中文总结
Reducio是无需基础设施变更、内存需求低的新型无服务器平台,通过CVM内函数隔离框架与分层缓存技术,可降低部署平台要求及函数内存消耗。
AI 中文摘要
基于机密虚拟机(CVM)的无服务器平台近期被提出,旨在解决无服务器函数的隐私问题,同时实现低延迟。但本研究指出,现有方案为达到这些特性,对基础设施变更和平台内存提出了可观要求。Reducio是一种替代型无服务器平台设计,无需基础设施变更,且能大幅降低平台内存需求。该平台包含两个核心组件:(1)基于内核去特权功能的CVM内部函数隔离框架,可最小化基础设施要求;(2)分层缓存方法与算法,能有效利用小型内存函数缓存。评估显示,Reducio可显著降低部署的平台要求及函数内存消耗。
英文摘要
Serverless platforms based on Confidential Virtual Machines (CVMs) have been recently proposed to address the privacy problems with serverless functions, while achieving low latency. Unfortunately, our study indicates that to achieve these properties, existing proposals impose non-trivial requirements in terms of infrastructure changes and platform memory. Reducio is an alternate serverless platform design that does not require infrastructure changes and significantly reduces platform memory requirements. The platform is designed using two key components: (1) a function isolation framework inside a CVM based on kernel deprivileging features that minimize infrastructure requirements, and (2) a layer-wise caching methodology and algorithm that effectively uses a small in-memory function cache. Our evaluation indicates that Reducio can significantly reduce both platform requirements for deployment and function memory consumption.
Comments12 pages, 9 figures, 3 tables