On the Design of Virtual Machine Sandboxes for Distributed Computing in Wide-area Overlays of Virtual Workstations

  • Authors:

  • David Isaac Wolinsky;Abhishek Agrawal;P. Oscar Boykin;Justin R. Davis;Arijit Ganguly;Vladimir Paramygin;Y. Peter Sheng;Renato J. Figueiredo

  • Affiliations:

  • University of Florida;University of Florida;University of Florida;University of Florida;University of Florida;University of Florida;University of Florida;University of Florida

  • Venue:
  • VTDC '06 Proceedings of the 2nd International Workshop on Virtualization Technology in Distributed Computing
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

With recent advances in virtual computing and the revelation that compute-intensive tasks run well on system virtual machines (VMs), the ability to develop, deploy, and manage distributed systems has been ameliorated. This paper explores the design space of VM-based sandboxes where the following techniques that facilitate the deployment of secure nodes in Wide-area Overlays of virtual Workstations (WOWs) are employed: DHCP-based virtual IP address allocation, self-configuring virtual networks supporting peer-to-peer NAT traversal, stacked file systems, and IPsec-based host authentication and end-to-end encryption of communication channels. Experiments with implementations of single-image VM sandboxes, which incorporate the above features and are easily deployable on hosted I/O VMMs, show execution time overheads of 10.6% or less for a batch-oriented CPU-intensive benchmark.