Hypervisors are increasingly complex and must be often updated for applying security patches, bug fixes, and feature upgrades. However, in a virtualized cloud infrastructure, updates to an operational hypervisor can be highly disruptive. Before being updated, virtual machines (VMs) running on a hypervisor must be either migrated away or shut down, resulting in downtime, performance loss, and network overhead. We present a new technique, called HyperFresh, to transparently replace a hypervisor with a new updated instance without disrupting any running VMs. A thin shim layer, called the hyperplexor, performs live hypervisor replacement by remapping guest memory to a new updated hypervisor on the same machine. The hyperplexor leverages nested virtualization for hypervisor replacement while minimizing nesting overheads during normal execution. We present a prototype implementation of the hyperplexor on the KVM/QEMU platform that can perform live hypervisor replacement within 10ms. We also demonstrate how a hyperplexor-based approach can used for sub-second relocation of containers for live OS replacement.
Sun 14 AprDisplayed time zone: Eastern Time (US & Canada) change
10:00 - 12:05 | |||
10:00 25mTalk | TEEv: Virtualizing Trusted Execution Environments on Mobile Platforms Research Papers Wenhao Li Shanghai Jiao Tong University, China, Yubin Xia Shanghai Jiao Tong University, China, Long Lu Northeastern University, n.n., Haibo Chen Shanghai Jiao Tong University, China, Binyu Zang Shanghai Jiao Tong University, China | ||
10:25 25mTalk | Secure Guest Virtual Machine Support in Apparition Research Papers Ethan Johnson University of Rochester, USA, Komail Dharsee University of Rochester, USA, John Criswell University of Rochester, USA | ||
10:50 25mTalk | ACRN: A Big Little Hypervisor for IoT Development Research Papers | ||
11:15 25mTalk | Fast and Live Hypervisor Replacement Research Papers Spoorti Doddamani Binghamton University, USA, Piush Kumar Sinha Binghamton University, USA, Hui Lu Binghamton University, USA, Tsu-Hsiang K. Cheng Binghamton University, USA, Hardik H. Bagdi Binghamton University, USA, Kartik Gopalan Binghamton University, USA | ||
11:40 25mTalk | A Binary-Compatible Unikernel Research Papers Pierre Olivier Virginia Tech, USA, Daniel Chiba Virginia Tech, USA, Stefan Lankes RWTH Aachen University, Germany, Changwoo Min Virginia Tech, USA, Binoy Ravindran Virginia Tech, USA |