论文标题
鞭炮的研究
Study of Firecracker MicroVM
论文作者
论文摘要
FireCracker是一种虚拟化技术，可利用内核虚拟机（KVM）。鞭炮属于名为Micro-Virtual Machines（Microvms）的新虚拟化类。使用FireCracker，我们可以在一秒钟内在非虚拟化环境中启动轻量级微型VM，同时提供传统VM提供的安全性和工作负载隔离，以及与容器\ Cite {B1}一起提供的资源效率。 Firecracker的目的是提供一个纤细的微型VM，由Rust中的大约50k代码组成，并为客座VM的攻击表面降低。该报告将检查鞭炮的内部，并了解为什么鞭炮是虚拟化和云计算中下一个大事。
Firecracker is a virtualization technology that makes use of Kernel Virtual Machine (KVM). Firecracker belongs to a new virtualization class named the micro-virtual machines (MicroVMs). Using Firecracker, we can launch lightweight MicroVMs in non-virtualized environments in a fraction of a second, at the same time offering the security and workload isolation provided by traditional VMs and also the resource efficiency that comes along with containers \cite{b1}. Firecracker aims to provide a slimmed-down MicroVM, comprised of approximately 50K lines of code in Rust and with a reduced attack surface for guest VMs. This report will examine the internals of Firecracker and understand why Firecracker is the next big thing going forward in virtualization and cloud computing.
