Application-Transparent Live Migration for Virtual Machine on Network Security Enhanced Hypervisor  

安全增强型虚拟化计算环境下的虚拟机动态迁移机制(英文)

作　　者：陈贤钦 高小鹏 万寒 王素梅 龙翔 

机构地区：[1]State Key Laboratory of Software Development Environment,BeiHang University

出　　处：《China Communications》2011年第3期32-42,共11页中国通信（英文版）

基　　金：supported by State Key Laboratory of Software Development Environment under Grant No. SKLSDE-2009ZX-02;China Aviation Science Fund under Grant No.20081951;National High Technical Research and Development Program of China (863 Program) under Grant No.2007AA01Z183

摘　　要：As the number of Virtual Machines(VMs) consolidated on single physical server increases with the rapid advance of server hardware,virtual network turns complex and frangible.Modern Network Security Engines(NSE) are introduced to eradicate the intrusions occurring in the virtual network.In this paper,we point out the inadequacy of the present live migration implementation,which hinders itself from providing transparent VM relocation between hypervisors equipped with Network Security Engines(NSE-H).This occurs because the current implementation ignores VM-related Security Context(SC) required by NSEs embedded in NSE-H.We present the CoM,a comprehensive live migration framework,for NSE-H-based virtualization computing environment.We built a prototype system on Xen hypervisors to evaluate our framework,and conduct experiments under various realistic application environments.The results demonstrate that our solution successfully fixes the inadequacy of the present live migration implementation,and the performance overhead is negligible.As the number of Virtual Machines(VMs) consolidated on single physical server increases with the rapid advance of server hardware,virtual network turns complex and frangible.Modern Network Security Engines(NSE) are introduced to eradicate the intrusions occurring in the virtual network.In this paper,we point out the inadequacy of the present live migration implementation,which hinders itself from providing transparent VM relocation between hypervisors equipped with Network Security Engines(NSE-H).This occurs because the current implementation ignores VM-related Security Context(SC) required by NSEs embedded in NSE-H.We present the CoM,a comprehensive live migration framework,for NSE-H-based virtualization computing environment.We built a prototype system on Xen hypervisors to evaluate our framework,and conduct experiments under various realistic application environments.The results demonstrate that our solution successfully fixes the inadequacy of the present live migration implementation,and the performance overhead is negligible.

关 键 词：live migration network security security context VIRTUALIZATION 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]