VMSF—一种内核级虚拟机监控器调度框架

虚拟化技术由于具有提高资源利用率、降低系统总体拥有成本等优点得到越来越多的关注。虚拟机成为计算机系统的一种新型应用模式,但虚拟机应用在服务质量保证和协同运行等方面与传统商用操作系统面向的应用不同,虚拟机监控器应针对此类应用的特点设计相应的调度算法。但是,在传统基于宿主操作系统的虚拟化技术中,虚拟机的调度由宿主操作系统的标准调度器完成。本文提出一种不修改宿主操作系统现有调度机制的虚拟机调度扩展框架VMSF,该框架允许第三方自行开发适于虚拟机系统的调度算法。最后通过在Linux上开源的内核级虚拟机监控器KVM上移植Xen的Credit调度器验证了本文研究的有效性。     

多核平台下XEN虚拟机动态调度算法研究

虚拟机调度算法对并行任务的执行效率考虑不够充分。现代处理器平台具备了多个可用的计算核心,使多个虚拟机并发执行成为了现实。针对多核平台下的并行虚拟机调度优化问题,提出一种基于任务特征虚拟机CON-Credit调度算法。该算法在调度并行任务时,使用动态方式对计算机核心进行分配,采用传统的虚拟机调度算法为执行普通任务的虚拟机进行分配;采用定制的同步算法给执行并行任务的虚拟机分进分配。相关实验显示,CON-Credit调度算法能显著提高并行任务的执行效率。     

Orbweb—A Network Substrate for Peer-to-Peer Desktop Grid Computing Based on Open Standards

While Desktop Grid Computing has become a promising alternative to classical Grids for certain kinds of applications, it has not yet reached the same level of standardization. In this article, we present Orbweb, a network substrate for Peer-to-Peer Desktop Grid Computing based on the open industrial-strength eXtensible Messaging and Presence Protocol (XMPP). We discuss, how XMPP can be leveraged to tackle domain-specific challenges, including high scalability, support for volatility, NAT/Firewall traversal, and protocol efficiency. Where XMPP fails to meet these requirements, we contribute pertinent extensions. In particular, we boost the scalability of XMPP by taking load of the XMPP servers through dynamically negotiated direct Peer-to-Peer communication channels between XMPP peers. We pave the way for scalable group membership management by substituting the existing XMPP Multi-User Chat protocol for one that does not suffer from limitations imposed by an »everyone knows everyone« visibility model and allows for deploying custom virtual topologies that best match the interaction patterns of a given application. As efficient multicasting is an essential prerequisite for many distributed algorithms, we adapt the well-known Bimodal Multicast protocol to work in a highly volatile Peer-to-Peer Desktop Grid Computing environment. Finally, we show how to improve the protocol efficiency of XMPP by leveraging a standardized binary encoding of the XML Information Set for XMPP packet transmission. To substantiate the applicability of our approach and the effectiveness of our extensions, we describe how some important higher-level services used in Peer-to-Peer Desktop Grid Computing can be implemented on top of Orbweb and provide a detailed experimental analysis with up to 10K nodes.     

XMPP协议在Android即时通讯系统中的应用

即时通讯是一种基于互联网的网络应用,目前很多即时通讯系统,如MSN,QQ等,但由于使用了不同的协议,各个系统之间不能互联。可扩展消息与存在协议（XMPP）是即时通讯系统通信协议的标准,该文提出一种基于XMPP协议的即时通讯系统方案,并基于Android平台设计实现了即时通讯客户端,有效的解决了即时通讯系统中通信不畅的问题,并为其他类型智能平台间的即时通信提出一种可参考的解决方案。     

云计算中虚拟机放置的自适应管理与多目标优化

云计算的一个关键需求是其基础设施中大规模虚拟机的放置问题.虚拟机和物理结点之间的映射决定了如何将云计算中虚拟化资源分配给多个Web应用,对云计算系统的性能、能耗和QoS保证有重要影响.文中提出了云计算中虚拟机放置的自适应管理框架,提出了带应用服务级目标约束的虚拟机放置多目标优化遗传算法,用于制定框架中的虚拟机放置策略....     

Improving the virtualization of rich applications by combining VNC and streaming protocols at the hypervisor layer

Virtual desktop infrastructure (VDI) solutions seek to provide a satisfactory user experience at the client side when accessing remote desktop applications, even from mobile devices with limited capabilities. This paper presents a new approach, improving on previous work by the authors, in which a combination of Virtual Network Computing (VNC) and streaming protocols allowed efficient remote web access to virtualized applications within a cloud architecture. The new approach simplifies virtual machine templates, from which virtual machine instances are deployed, by centralizing software modules, greatly simplifying their management. Our new contribution consists of an integrated solution with specific WebM video encoding modules in charge of application visual output processing, an Hypertext Transfer Protocol (HTTP) streaming server, and a VNC server. The solution can be installed in the hypervisor of the host machines instead of replicating the servers and modules throughout the guest (virtual) machines that run the virtualized applications. Consequently, their implementations are unique and independent of the operating system of the virtual machines. In short, it is not necessary to provide different implementations for different operating systems, which reduces the complexity of virtual machine templates and greatly simplies platform management. To demonstrate our solution, we have modified the Quick Emulator (QEMU)‐Kernel‐based Virtual Machine (KVM) hypervisor source code accordingly. We also present qualitative and quantitative analyses that demonstrate that the new approach is advantageous in terms of software management and quality of experience, compared with our previous work and other well‐known thin clients, contributing to the enhancement of VDI systems. Copyright © 2015 John Wiley & Sons, Ltd.     

虚拟技术在计算机组装与维护实训中的应用与研究

阐述虚拟机的运行机制和特点,介绍通过虚拟机进行软件安装维护方面的典型案例,表明虚拟机可以在实训过程中替代真实的物理主机使用。     

基于虚拟化的系统安全增强及显卡透传研究

针对个人终端操作系统安全问题,提出一种基于系统虚拟化技术的操作系统安全增强模型,研究提高该模型下KVM虚拟机显示性能的显卡透传技术。实验结果表明,显卡透传技术能够克服虚拟机客户操作系统的显示性能缺陷,使得客户机操作系统能够像真实操作系统一样满足图形显示与处理的应用,适用于终端安全领域。     

Projective virtual reality as a basis for on‐line control of complex systems‐not only‐over the internet

Already in 1994 the term Projective Virtual Reality was coined and a first implementation was used to control a complex multirobot system in Germany over the Internet from California. Building on this foundation, the general aim of the development of virtual reality technology for automation applications at the Institute of Robotics Research (IRF) today is to provide the framework for Projective Virtual Reality for a broad range of applications. The general idea of Projective Virtual Reality is to allow users to “project” actions carried out in the virtual world into the real world by means of robots or other means of automation. The framework is based on a task‐oriented approach which builds on the “task deduction” capabilities of a newly developed virtual reality system and a task planning component. The advantage of this approach is that robots which work at great distances from the control station can be controlled as easily and intuitively as robots that work right next to the control station. Robot control technology now provides the user in the virtual world with a “prolonged arm” into the physical environment, thus paving the way for intuitive control of complex systems over the Internet—and in general for a new quality of user‐friendly man‐machine interfaces for automation applications. Lately, this work has been enhanced by a new structure that allows one to distribute the virtual reality application over multiple computers on a network. With this new feature, it is now possible for multiple users to share the same virtual room, although they may physically be thousands of miles apart. They only need an Internet connection to share this new experience. Lately, the network distribution techniques have been further developed to not just allow users to cooperate over networked PCs but also to be able to set up a panorama projection or a cave running of a networked cluster of PCs. This approach cuts down the costs for such a high‐end visualization environment drastically and allows for a new range of applications. © 2005 Wiley Periodicals, Inc.     

Fatigue evaluation in maintenance and assembly operations by digital human simulation in virtual environment

Virtual human techniques have been used a lot in industrial design in order to consider human factors and ergonomics as early as possible, and it has been integrated into VR applications to complete ergonomic evaluation tasks. In order to generalize the evaluation task in VE, especially for physical fatigue evaluation, we integrated a new fatigue model into a virtual environment platform. Virtual Human Status is proposed in this paper in order to assess the difficulty of manual handling operations, especially from the physical perspective. The decrease of the physical capacity before and after an operation is used as an index to indicate the difficulty level. The reduction of physical strength is simulated in a theoretical approach on the basis of a fatigue model in which fatigue resistances of different muscle groups were regressed from 24 existing maximum endurance time models. A framework based on digital human modeling technique is established to realize the comparison of physical status. An assembly case in airplane assembly is simulated and analyzed under the framework in VRHIT experiment platform. The endurance time and the decrease of the joint moment strengths are simulated. The experimental result in simulated operations under laboratory conditions confirms the feasibility of the theoretical approach: integration of virtual human simulation into virtual reality for physical fatigue evaluation.     

基于KVM虚拟桌面的透明消息通道设计

云管理平台和虚拟机终端用户间的通信一般采用代理软件或插件,便捷性和抗干扰能力较低。针对该问题,利用基于内核的虚拟机(KVM)虚拟桌面,提出一种云服务提供节点(虚拟机所在物理主机)和虚拟机终端用户之间双向交互的透明消息通道设计方案。在云管理平台中建立消息控制端,用于接收和处理服务节点发往虚拟机终端用户的消息,并将消息转换为图像,使图像内容以位图像素数据格式的方式读出到特定文件中,作为消息发送模块的消息来源。通过修改KVM虚拟化平台中Qemu-KVM集成的VNC Server端源码,在源码中添加消息发送模块和反馈接收模块,将消息集成融入到虚拟机桌面图像中,并对VNC Client远程终端反馈的消息进行处理,从而得到一条对虚拟机自身系统透明的,可在云平台和终端用户间双向交互的消息通道。实验结果验证了该设计方案的可行性。     

虚拟机动态迁移的研究

虚拟机技术可以使硬件和软件明确分开,还能实现容错管理、动态负载均衡、服务器在线维护,对于提高数据中心和集群的服务性能尤其有利。设计并实现了4种负载类型的虚拟机在XEN上的迁移实验,比较了不同负载对于动态迁移的影响,以及动态迁移相对于静态迁移的优越性。     

基于虚拟机的软件保护研究与设计

虚拟机技术一直是当今计算机安全领域研究的热点之一。从软件保护的角度出发,介绍了基于虚拟机的软件保护设计方案中的关键技术,并给出了一个范例,说明具体步骤和方法。该方法将保护对象细化为函数,给出了单函数识别的具体步骤和方法,利用基本的x86编码来构造虚拟机,对基本指令集采用基于字节码的加解密技术,此外还对各类指令进行了必要的模块化扩展以增加保护力度。目前国内对于虚拟机的保护技术处于起步阶段,因而对于虚拟机技术的理论基础研究和技术实践应用均具有较高的研究价值和发展空间。     

基于虚拟服务的SSL VPN研究

基于对标准SSL VPN（Secure Socket Layer Virtual Private Network）的研究分析，提出了基于虚拟服务的SSLVPN结构．该结构包含两项关键性技术：虚拟服务和基于VPN流的访问控制模型．一方面，通过在客户端动态生成虚拟服务来支持传统应用软件安全透明地访问VPN内部服务群；另一方面，针对VPN流的特点，将访问控制与VPN隧道、转发机制紧耦合，从而实现了细粒度的访问控制及应用层入侵检测．最后，给出了一个实现原型及相关性能测试．     

基于Hadoop与XMPP的云翻译系统的研究与实现

针对传统机器翻译系统准确性差、人工翻译成本高等缺陷,提出了一种基于Hadoop云计算框架与XMPP协议的云翻译系统解决方案,结合传统翻译技术和Hadoop云计算框架,利用XMPP在异构系统之间的互通,建立用户、译员和对象的三方互助云平台.该系统可挖掘互助沟通过程中的庞杂的语料资源,具有语料库数据量大,翻译准确、翻译效率高、智能性强等特点,解决了人工翻译成本高、机器翻译歧义性大等问题,实现了不同语种人群通过互联网进行文字即时通信时的多语无障碍沟通.     

A hybrid P2P communications architecture for zonal MMOGs

Distributed Virtual Environments are becoming more popular in today’s computing and communications among people. Perhaps the most widely used form of such environments is Massively Multiplayer Online Games (MMOG), which are in the form of client/server architecture that requires considerable server resources to manage a large number of distributed players. Peer-to-peer communication can achieve scalability at lower cost but may introduce other difficulties. Synchronous communication is a prime concern for multi-user collaborative applications like MMOGs where players need frequently interaction with each other to share their game states. In this article, we present a hybrid MMOG architecture called MM-VISA (Massively Multiuser VIrtual Simulation Architecture). In this architecture, servers and peers are coupled together to take the inherent advantages of the centralized architecture and the scalability of distributed systems. As the virtual world is decomposed into smaller manageable zones, the players’ random movement causes reorganization at the P2P overlay structure. The frequent nature of movements along with unintelligent zone crossing approaches, currently implemented in MMOGs, breaks synchronous communication. To limit such problem, we consider players’ gaming characteristics to intelligently define routing paths. A graph-theoretic framework is incorporated for overlay oriented real-time distributed virtual environments. We shall show that interest-driven zone crossing, dynamic shared region between adjacent zones, and clustering of entities based on their attributes significantly decrease unstable overlay situations. The effectiveness of the presented system is justified through simulation.     

Autonomic Clouds on the Grid

Computational clouds constructed on top of existing Grid infrastructure have the capability to provide different entities with customized execution environments and private scheduling overlays. By designing these clouds to be autonomically self-provisioned and adaptable to changing user demands, user-transparent resource flexibility can be achieved without substantially affecting average job sojourn time. In addition, the overlay environment and physical Grid sites represent disjoint administrative and policy domains, permitting cloud systems to be deployed non-disruptively on an existing production Grid. Private overlay clouds administered by, and dedicated to the exclusive use of, individual Virtual Organizations are termed Virtual Organization Clusters. A prototype autonomic cloud adaptation mechanism for Virtual Organization Clusters demonstrates the feasibility of overlay scheduling in dynamically changing environments. Commodity Grid resources are autonomically leased in response to changing private scheduler loads, resulting in the creation of virtual private compute nodes. These nodes join a decentralized private overlay network system called IPOP (IP Over P2P), enabling the scheduling and execution of end user jobs in the private environment. Negligible overhead results from the addition of the overlay, although the use of virtualization technologies at the compute nodes adds modest service time overhead (under 10%) to computationally-bound Grid jobs. By leasing additional Grid resources, a substantial decrease (over 90%) in average job queuing time occurs, offsetting the service time overhead.     

基于硬件虚拟化的虚拟机进程代码分页式度量方法

云环境下恶意软件可利用多种手段篡改虚拟机（VM）中关键业务代码,威胁其运行的稳定性。传统的基于主机的度量系统易被绕过或攻击而失效,针对在虚拟机监视器（VMM）层难以获取虚拟机中运行进程完整代码段并对其进行完整性验证的问题,提出基于硬件虚拟化的虚拟机进程代码分页式度量方法。该方法以基于内核的虚拟机（KVM）作为虚拟机监视器,在VMM层捕获虚拟机进程的系统调用作为度量流程的触发点,基于相对地址偏移解决了不同版本虚拟机之间的语义差异,实现了分页式度量方法在VMM层透明地验证虚拟机中运行进程代码段的完整性。实现的原型系统——虚拟机分页式度量系统（VMPMS）能有效度量虚拟机中进程,性能损耗在可接受范围内。     

Impact of hand-assisted viewing on user performance and?learning patterns in virtual environments

The ability to locate, select and interact with objects is fundamental to most Virtual Reality (VR) applications. Recently, it was demonstrated that the virtual hand metaphor, a technique commonly used for these tasks, can also be employed to control the virtual camera, resulting in improved performance and user evaluation in visual search tasks.     

云计算中基于多目标优化的动态资源配置方法

目前,云平台的大多数动态资源分配策略只考虑如何减少激活物理节点的数量来达到节能的目的,以实现绿色计算,但这些资源再配置方案很少考虑到虚拟机放置的稳定性。针对应用负载的动态变化特征,提出一种新的面向多虚拟机分布稳定性的基于多目标优化的动态资源配置方法,结合各应用负载的当前状态和未来的预测数据,综合考虑虚拟机重新放置的开销以及新虚拟机放置状态的稳定性,并设计了面向虚拟机分布稳定性的基于多目标优化的遗传算法（MOGANS）进行求解。仿真实验结果表明,相对于面向节能和多虚拟机重分布开销的遗传算法（GA-NN）,MOGANS得到的虚拟机分布方式的稳定时间是GA-NN的10.42倍;同时,MOGANS也较好权衡了多虚拟机分布的稳定性和新旧状态转换所需的虚拟机迁移开销之间的关系。