Write a Blog >>
VEE 2017
Sat 8 - Sun 9 April 2017 Xi'an, China
Sat 8 Apr 2017 16:10 - 16:35 at Zhu Que Room - Introspection Chair(s): Paolo Bonzini

With DevOps automation and an everything-as-code approach to lifecycle management for cloud-native applications, challenges emerge from an operational visibility and control perspective. Once a VM is deployed in production it typically becomes a hands-off entity in terms of restrictions towards inspecting or tuning it, for the fear of negatively impacting its operation. We present CIVIC (Cloning and Injection based VM Inspection for Cloud), a new mechanism that enables safe inspection of unmodified production VMs on-the-fly. CIVIC restricts all impact and side-effects of inspection inside a live clone of the production VM. New functionality over the replicated VM state is introduced using code injection. In this paper, we describe the design and implementation of our solution over KVM/QEMU. We demonstrate four of its use-cases- (i) attaching an intrusive anomaly detector to a live service, (ii) impact-heavy problem diagnostics and troubleshooting, (iii) safe reuse of system monitoring agents, and (iv) live tuning of a webserver’s configuration parameters. Our evaluation shows CIVIC is nimble and lightweight in terms of memory footprint as well as clone activation time (6.5s), and has a low impact on the original VM (<10%).

Sat 8 Apr
Times are displayed in time zone: (GMT) Azores change

vee-2017-Session-3
15:45 - 17:00: Session 3 - Introspection at Zhu Que Room
Chair(s): Paolo BonziniRed Hat, Inc.
vee-2017-Session-315:45 - 16:10
Talk
Liang DengState Key Laboratory for Novel Software Technology, Nanjing University; SANGFOR TECHNOLOGIES CO., LTD., Peng LiuPurdue University, Jun XuInformation Sciences and Technology, Pennsylvania State University, Ping ChenInformation Sciences and Technology, Pennsylvania State University, Qingkai ZengState Key Laboratory for Novel Software Technology, Nanjing University, China
vee-2017-Session-316:10 - 16:35
Talk
Sahil SunejaIBM Research, Ricardo KollerIBM Research, Canturk IsciIBM Research, Eyal de LaraUniversity of Toronto, Ali HashemiUniversity of Toronto, Arnamoy Bhattacharyya, Cristiana AmzaUniversity of Toronto
vee-2017-Session-316:35 - 17:00
Talk
DOI Authorizer link File Attached