一种IaaS多租户环境下虚拟机软件更新服务机制  

A software update mechanism for virtual machines in IaaS multi-tenant environment

作　　者：陈广瑞[1] 陈兴蜀[1] 王毅桐 葛龙[1] CHEN Guang-rui CHEN Xing-shu WANG Yi-tong GE Long(College of Computer Science, Sichuan University, Sichuan 610065, Chengdu, China)

机构地区：[1]四川大学计算机学院,四川成都610065

出　　处：《山东大学学报（理学版）》2017年第3期60-67,共8页Journal of Shandong University(Natural Science)

基　　金：国家自然科学基金资助项目(61272447)

摘　　要：针对当前IaaS环境下虚拟机中软件版本不易管理以及软件更新不及时带来的安全问题,研究了一种适用于云计算环境下租户虚拟机应用软件更新和系统补丁升级的服务机制。首先,该机制建立了统一的管理框架,实现了软件和补丁的便捷管理;其次,该机制借助Linux网络命名空间的方式将更新服务接入到不同租户的虚拟网络,实现了不同租户的更新服务的灵活接入和安全隔离;最后,针对更新相同软件和补丁的批量虚拟机,采用可靠多播的方式进行软件和补丁分发,大大减小了网络流量,节省了网络资源。实验结果表明,该机制可以有效地提高软件和补丁的分发效率、节省网络资源、减小CPU的消耗,同时保证不同租户更新服务的隔离性。To facilitate the management of software versions in Virtual Machines （VMs） in Infrastructure as a Service （IaaS） environment and reduce the potential security issue is introduced by outdated softwares, a software update mech- anism was studied. Firstly, a unified management framework was proposed, and the update tasks are managed by plat- form instead of users themselves. And then, the mechanism accesses the update service to tenant network using Linux Network Namespace, and isolates the different tenants update services. Lastly, for the same update tasks, this mecha- nism distributes the software packages in reliable multicast way, which greatly reduces network traffics and saves net- work resources. The result showed that this mechanism could effectively improve the efficiency of software distribution, save the network resources, reduce the CPU consumption, and ensure the isolation of different tenants update services.

关 键 词：基础设施即服务 云计算 网络虚拟化 软件更新 补丁升级 可靠多播 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]