一种IaaS多租户环境下虚拟机软件更新服务机制

发布时间：2018-05-06 13:15

本文选题：基础设施即服务 + 云计算　；参考：《山东大学学报(理学版)》2017年03期

【摘要】：针对当前IaaS环境下虚拟机中软件版本不易管理以及软件更新不及时带来的安全问题,研究了一种适用于云计算环境下租户虚拟机应用软件更新和系统补丁升级的服务机制。首先,该机制建立了统一的管理框架,实现了软件和补丁的便捷管理;其次,该机制借助Linux网络命名空间的方式将更新服务接入到不同租户的虚拟网络,实现了不同租户的更新服务的灵活接入和安全隔离;最后,针对更新相同软件和补丁的批量虚拟机,采用可靠多播的方式进行软件和补丁分发,大大减小了网络流量,节省了网络资源。实验结果表明,该机制可以有效地提高软件和补丁的分发效率、节省网络资源、减小CPU的消耗,同时保证不同租户更新服务的隔离性。
[Abstract]:Aiming at the security problems caused by the difficulty of managing the software version in the virtual machine under the current IaaS environment and the late updating of the software, a service mechanism suitable to update the application software and update the system patch of the tenant virtual machine in cloud computing environment is studied in this paper. First of all, the mechanism establishes a unified management framework, and realizes the convenient management of software and patches. Secondly, the mechanism connects the update service to the virtual network of different tenants by means of the Linux network namespace. The flexible access and security isolation of the update service of different tenants are realized. Finally, for the batch virtual machine which updates the same software and patches, the software and patch are distributed by reliable multicast, which greatly reduces the network traffic. Saves network resources. Experimental results show that this mechanism can effectively improve the efficiency of software and patch distribution, save network resources, reduce the consumption of CPU, and ensure the isolation of different tenants updating services.
【作者单位】：四川大学计算机学院;
【基金】：国家自然科学基金资助项目(61272447)
【分类号】：TP302;TP309

【相似文献】