vm wear

The Future of Virtual Machines: A VMware Perspective: 

© 2001 VMware, Inc. All rights reserved. The Future of Virtual Machines: A VMware Perspective KOTA PURNACHANDU SRI HARSHA INSTUITE OF PG STUDIES NELLORE

Outline: 

© 2001 VMware, Inc. All rights reserved. Outline Historical Perspective MultipleWorlds™ Technology Technology and Products Technology Hosted and Host-less architectures Performance 4 Usage scenarios

The Problem (1960’s): 

© 2001 VMware, Inc. All rights reserved. The Problem (1960’s) Mainframe Hardware Operating System

The Solution (1960’s): 

© 2001 VMware, Inc. All rights reserved. The Solution (1960’s) Mainframe Hardware Operating System Operating System Mainframe Hardware

Virtual Machine Monitors: 

© 2001 VMware, Inc. All rights reserved. Virtual Machine Monitors A thin software layer that sits between hardware and the operating system— virtualizing and managing all hardware resources IBM Mainframe IBM VM/370 CMS MVS CMS CMS App App App App

Old idea from the 1960s: 

© 2001 VMware, Inc. All rights reserved. Old idea from the 1960s IBM VM/370 – A VMM for IBM mainframe Multiple OS environments on expensive hardware Desirable when few machine around Popular research idea in 1960s and 1970s Entire conferences on virtual machine monitor Hardware/VMM/OS designed together Interest died out in the 1980s and 1990s. Hardware got cheap Operating systems got more more powerful (e.g multi-user)

A return to Virtual Machines: 

© 2001 VMware, Inc. All rights reserved. A return to Virtual Machines Disco: Stanford research project (1996-): Run commodity OSes on scalable multiprocessors Focus on high-end: NUMA, MIPS, IRIX Hardware has changed: Cheap, diverse, graphical user interface Designed without virtualization in mind System Software has changed: Extremely complex Advanced networking protocols But even today : Not always multi-user With limitations, incompatibilities, …

The Problem Today: 

© 2001 VMware, Inc. All rights reserved. The Problem Today Intel Architecture Operating System

The VMware Solution: 

© 2001 VMware, Inc. All rights reserved. The VMware Solution Intel Architecture Operating System Operating System Intel Architecture

VMware™ MultipleWorlds™ Technology: 

© 2001 VMware, Inc. All rights reserved. VMware ™ MultipleWorlds ™ Technology A thin software layer that sits between Intel hardware and the operating system— virtualizing and managing all hardware resources Intel Architecture VMware MultipleWorlds Win 2000 Win NT Linux Win 2000 App App App App

MultipleWorlds Technology : 

© 2001 VMware, Inc. All rights reserved. MultipleWorlds Technology A world is an application execution environment with its own operating system World Intel Architecture VMware MultipleWorlds Win 2000 Win NT Linux Win 2000 App App App App

MultipleWorlds Technology : 

© 2001 VMware, Inc. All rights reserved. MultipleWorlds Technology A world is an application execution environment with its own operating system World Intel Architecture VMware MultipleWorlds Win 2000 Win NT Linux Win 2000 App App App App

Challenges: 

© 2001 VMware, Inc. All rights reserved. Challenges Virtualization of IA-32 Hardware Diversity Acceptance

VMware Workstation– Screen shot: 

© 2001 VMware, Inc. All rights reserved. VMware Workstation– Screen shot

VMware Server – Screen Shot: 

© 2001 VMware, Inc. All rights reserved. VMware Server – Screen Shot Web-based management interface Stop, start, suspend/resume virtual machines Monitor CPU usage Run scripts Secure user authentication Remote Console Windows and Linux versions Full desktop display Full mouse and keyboard support Secure user authentication Access VMware configuration editor

VMware Products: 

© 2001 VMware, Inc. All rights reserved. VMware Products VMware Workstation Run Multiple Operating Systems on your workstation Hosted Architecture Available for Linux and Windows hosts VMware GSX Server Run multiple servers on your server Hosted Architecture Available for Linux hosts and soon Windows hosts VMware ESX Server + Quality of Service + High-performance I/O Host-less Architecture

Virtual Hardware: 

© 2001 VMware, Inc. All rights reserved. Virtual Hardware Floppy Disks Parallel Ports Serial/Com Ports Ethernet Keyboard Mouse Monitor (VMM) IDE Controller SCSI Controller Sound Card

Attributes of MultipleWorlds Technology: 

© 2001 VMware, Inc. All rights reserved. Attributes of MultipleWorlds Technology Software compatibility Runs pretty much all software Low overheads/High performance Near “raw” machine performance Complete isolation Total data isolation between virtual machines Encapsulation Virtual machines are not tied to physical machines Resource management

VMware Core Technology: 

© 2001 VMware, Inc. All rights reserved. VMware Core Technology The present

Virtualization through Ring Compression : 

© 2001 VMware, Inc. All rights reserved. 0 VMM Virtualization through Ring Compression 1 2 3 user Virtual Machine Monitor (VMM) runs at ring 0 Kernel(s) run at ring 1 Requires that CPU is virtualizable kernel

Classification of processor architectures: 

© 2001 VMware, Inc. All rights reserved. Classification of processor architectures Strictly virtualizable processor architectures Can build a VMM based on trap emulation exclusively No software running inside the VM cannot determine the presence of the VMM (short of timing attacks) Examples: IBM S/390, DEC Compaq Intel Alpha, PowerPC (Non-strictly) virtualizable processor architectures Trap emulation alone is not sufficient and/or not complete E.g. instructions have different semantics at various levels (sufficient) E.g Some software sequences can determine the presence of the VMM (complete) Examples: IA-32, IA-64 Non virtualizable processor architectures Basic component missing (e.g. MMU, …)

Hosted VMware Architecture: 

© 2001 VMware, Inc. All rights reserved. Hosted VMware Architecture VMware achieves both near-native execution speed and broad device support by transparently switching* between Host Mode and VMM Mode. Guest OS Applications Guest Operating System Host OS Apps Host OS PC Hardware Disks Memory CPU NIC VMware App Virtual Machine VMware Driver Virtual Machine Monitor Host Mode VMM Mode VMware, acting as an application, uses the host to access other devices such as the hard disk, floppy, or network card The VMware Virtual machine monitor allows each guest OS to directly access the processor (direct execution) *VMware typically switches modes 1000 times per second

Hosted VMM Architecture: 

© 2001 VMware, Inc. All rights reserved. Hosted VMM Architecture Advantages: Installs and runs like an application Portable – host OS does I/O access Coexists with applications running on the host Limits: Subject to Host OS: Scheduling Decisions Resource management decisions OS failures Performance overheads: World Switch I/O access Usenix 2001 paper: J. Sugerman, G. Venkitachalam and B.-H. Lim, “Virtualizing I/O on VMware Workstation’s Hosted Architecture”.

Virtualizing a Network Interface: 

© 2001 VMware, Inc. All rights reserved. Virtualizing a Network Interface Host OS PC Hardware Physical NIC VMApp VMDriver Guest OS VMM Physical Ethernet NIC Driver NIC Driver Virtual Bridge Virtual Network Hub

Experiment – TCP Throughput: 

© 2001 VMware, Inc. All rights reserved. Experiment – TCP Throughput Two speed of host: Standard -- 733 MHz Pentium III Slower -- 350 MHz Pentium II 100 megabit Ethernet connected via crossover cable Host and Guest OSes are Linux 2.2.x kernels 3 optimizations that reduce number of World switches VM TCP Host TCP Host Host Host Native Virtual Machine

Optimized Performance– 733 MHz: 

© 2001 VMware, Inc. All rights reserved. Optimized Performance– 733 MHz Native VM/733 MHz Version 2.0 VM/733 MHz Optimized

Optimized Performance– 350MHz: 

© 2001 VMware, Inc. All rights reserved. Optimized Performance– 350MHz Native VM/350 MHz Version 2.0 VM/350 MHz Optimized

CPU Utilization – VM/PC-733: 

© 2001 VMware, Inc. All rights reserved. CPU Utilization – VM/PC-733 Percent Native PC-733 is I/O bound with under 20% CPU utilization

Beyond the Hosted Architecture: 

© 2001 VMware, Inc. All rights reserved. Beyond the Hosted Architecture Limits of the Hosted Architecture: World switch overhead – especially I/O Hard to make QoS guarantees Depend on the Host ESX Server Architecture: Eliminate the host All applications run in a VM Looks closer to a traditional VMM system

ESX Server Architecture: 

© 2001 VMware, Inc. All rights reserved. ESX Server Architecture Memory nic nic NIC disk CPU x86 SMP Hardware Console OS VMM Guest OS Guest OS Guest OS Guest OS VMkernel Scheduler Memory Mgmt SCSI Driver Ethernet Driver VMM VMM VMM

High Performance Network: 

© 2001 VMware, Inc. All rights reserved. x86 SMP Hardware High Performance Network VMware Server VMM NIC Stub Driver Shared Device NIC specific drivers Ethernet and Gigabit Ethernet Each virtual adapter has its own MAC address No world switch ! VMware Ethernet Driver NIC Exclusive Device VMM VMM VMware Ethernet Driver VMM Stub Driver Stub Driver

Intra-system networking: 

© 2001 VMware, Inc. All rights reserved. x86 SMP Hardware Intra-system networking VMware Server VMM Stub Driver Stub Driver Stub Driver NIC specific drivers Executes at memory speed Stub Driver Virtual Network

Usage Scenarios: 

© 2001 VMware, Inc. All rights reserved. Usage Scenarios 4 Examples on Desktops and Servers

Scenario #1: Testing and Deployment: 

© 2001 VMware, Inc. All rights reserved. Deploy Production VM Production VM Production VM Production VM Develop- ment VM Scenario #1: Testing and Deployment QA VM Test Develop

Slide 35: 

© 2001 VMware, Inc. All rights reserved. Testing and Deployment Test and deploy in VMware worlds Testing & deployment was error-prone and expensive Challenge Solution “VMware allows us to deliver well- tested and more reliable solutions in a shorter time frame at substantially lower costs." Major Wall Street Investment Banking Firm

Scenario # 2: Server Consolidation: 

© 2001 VMware, Inc. All rights reserved. Scenario # 2: Server Consolidation Web Server App Server Web Server App Server Database Server Database Server App Server App Server Web Server Web Server VMware MultipleWorlds + Physical Hardware

Slide 37: 

© 2001 VMware, Inc. All rights reserved. Server Consolidation Run each database in a VMware world One database per oil well, one server per database The Challenge The Solution oil well photo “We’re able to run up to 10 database servers on a single server, which allows us to provide mainframe levels of reliability and data security at much lower cost."

Scenario #3: Application Compatibility: 

© 2001 VMware, Inc. All rights reserved. Scenario #3: Application Compatibility Some applications require their OS Some solutions require multiple applications Appliances provide solutions  VMware in Appliances

Cisco Content Engine 590: 

© 2001 VMware, Inc. All rights reserved. Intel Appliance Linux Cisco Content Engine 590 Windows 2000 RealPlayer Server Media Server IP chain

Scenario #4: Security Solutions: 

© 2001 VMware, Inc. All rights reserved. Scenario #4: Security Solutions Traditional tension : Security vs. Usability Secure systems are not that usable E.g: require some particular OS setups Flexible systems are not that secure Many documented examples Virtual Machines allow: Secure Host that ensures the security of the whole system Flexible, Usable Virtual Machines that play no role in the security of the whole system

National Security Agency NetTop: 

© 2001 VMware, Inc. All rights reserved. National Security Agency NetTop Classified VM VPN Internet VM Firewall SE-Linux