The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. ex. Some numerals are expressed as "XNUMX".
Copyrights notice
The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. Copyrights notice
최근 Linux 컨테이너는 클라우드 시스템의 사실상 표준이 되어 클라우드 제공업체가 훨씬 더 확장된 방식으로 가상 환경을 생성할 수 있게 되었습니다. 그러나 컨테이너 네트워크 구성은 아직 미숙하며 효율적인 클라우드 관리를 위해서는 자동 검증이 필요합니다. 우리는 제안한다 베리쿠베는 정책을 나타내는 새로운 그래프 구조를 활용하여 메모리 소비를 줄이고 검증을 가속화합니다. 게다가 기존 작품들과는 다르게 베리쿠베 클라우드가 성능의 이점을 활용하여 채택하는 Cilium Policy의 복잡한 의미와 호환됩니다. 우리의 평가 결과는 다음과 같습니다. 베리쿠베 메모리 효율성은 최소 1.5배, 데이터 구조 관리는 최소 20배, 검증은 XNUMX배 더 나은 성능을 발휘합니다.
Haney KANG
KAIST
Seungwon SHIN
KAIST
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
부
Haney KANG, Seungwon SHIN, "Verikube: Automatic and Efficient Verification for Container Network Policies" in IEICE TRANSACTIONS on Information,
vol. E105-D, no. 12, pp. 2131-2134, December 2022, doi: 10.1587/transinf.2022EDL8046.
Abstract: Recently, Linux Container has been the de-facto standard for a cloud system, enabling cloud providers to create a virtual environment in a much more scaled manner. However, configuring container networks remains immature and requires automatic verification for efficient cloud management. We propose Verikube, which utilizes a novel graph structure representing policies to reduce memory consumption and accelerate verification. Moreover, unlike existing works, Verikube is compatible with the complex semantics of Cilium Policy which a cloud adopts from its advantage of performance. Our evaluation results show that Verikube performs at least seven times better for memory efficiency, at least 1.5 times faster for data structure management, and 20K times better for verification.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2022EDL8046/_p
부
@ARTICLE{e105-d_12_2131,
author={Haney KANG, Seungwon SHIN, },
journal={IEICE TRANSACTIONS on Information},
title={Verikube: Automatic and Efficient Verification for Container Network Policies},
year={2022},
volume={E105-D},
number={12},
pages={2131-2134},
abstract={Recently, Linux Container has been the de-facto standard for a cloud system, enabling cloud providers to create a virtual environment in a much more scaled manner. However, configuring container networks remains immature and requires automatic verification for efficient cloud management. We propose Verikube, which utilizes a novel graph structure representing policies to reduce memory consumption and accelerate verification. Moreover, unlike existing works, Verikube is compatible with the complex semantics of Cilium Policy which a cloud adopts from its advantage of performance. Our evaluation results show that Verikube performs at least seven times better for memory efficiency, at least 1.5 times faster for data structure management, and 20K times better for verification.},
keywords={},
doi={10.1587/transinf.2022EDL8046},
ISSN={1745-1361},
month={December},}
부
TY - JOUR
TI - Verikube: Automatic and Efficient Verification for Container Network Policies
T2 - IEICE TRANSACTIONS on Information
SP - 2131
EP - 2134
AU - Haney KANG
AU - Seungwon SHIN
PY - 2022
DO - 10.1587/transinf.2022EDL8046
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E105-D
IS - 12
JA - IEICE TRANSACTIONS on Information
Y1 - December 2022
AB - Recently, Linux Container has been the de-facto standard for a cloud system, enabling cloud providers to create a virtual environment in a much more scaled manner. However, configuring container networks remains immature and requires automatic verification for efficient cloud management. We propose Verikube, which utilizes a novel graph structure representing policies to reduce memory consumption and accelerate verification. Moreover, unlike existing works, Verikube is compatible with the complex semantics of Cilium Policy which a cloud adopts from its advantage of performance. Our evaluation results show that Verikube performs at least seven times better for memory efficiency, at least 1.5 times faster for data structure management, and 20K times better for verification.
ER -