虚系统防火墙中处理器资源分配方案  

Process scheduling scheme for virtual firewalls

作　　者：杨启军[1] 鲁士文[2] 

机构地区：[1]中国科学院研究生院,北京100049 [2]中国科学院计算技术研究所,北京100080

出　　处：《计算机工程与设计》2010年第16期3551-3553,3616,共4页Computer Engineering and Design

摘　　要：为了有效地解决虚系统防火墙中处理器资源分配问题,提出一个基于阈值触发的PQ与WRR队列结合的处理器资源分配方案。为每个虚系统设置一个软件队列,通过对各虚系统的软件队列调度来实现处理器资源在各虚系统中的按需分配。软件队列之间采用WRR算法实现了高效率的基于权重的调度,硬件队列和软件队列之间采用了动态优先级的调度算法,设置调度触发阈值,降低了调度方案引入的性能损失。测试数据表明,该方案引入的性能损失很低,且处理器资源在各虚系统中得到了按需调度。To solve the processor resource allocation problem in virtual system firewall,a scheduling scheme,which combines PQ（priority queue） triggered by a threshold and WRR（weighted round robin） queue,is proposed.Software queues are set up for each virtual system.Through scheduling software queues of each virtual system,on-demand allocation of processor resource is achieved.WRR algorithm is used to implement high efficient weight-based scheduling between software queues.Dynamic priority algorithm is used between hardware queues and software queues.By setting scheduling trigger threshold,performance loss by the scheduling scheme is reduced.Test data shows that the performance loss introduced by the scheme is low,and processor resources have been scheduled ondemand for multiple virtual systems.

关 键 词：虚拟防火墙 处理器资源分配 加权轮循 优先级队列 按需分配 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]