VM内部隔离驱动程序的可靠性架构

利用虚拟化技术来整合资源已成为高性能服务器提高资源利用率的重要手段，虚拟化技术的可靠性对于高性能服务器所提供服务的质量至关重要.然而，驱动故障严重影响了虚拟机中操作系统的可靠性，也同样影响到整个服务器的可靠性.为此，提出一种在虚拟机内部通过隔离故障驱动程序来提高虚拟机可靠性的架构，该架构通过监视驱动程序所使用的内存信息来建立驱动可写权限的授权表，并在虚拟机监视器中设置虚拟机内核空间对应影子页表的写保护来捕获虚拟机的写操作，进而结合授权表判断被隔离驱动程序写操作的正确性.目前，该架构能够在无需修改驱动程序的情况下，在虚拟机内部实现对驱动程序的隔离.实验结果表明：该架构可以隔离84.63%的注入故障造成的系统崩溃失效，并且对于驱动性能的影响小于20%，提高了虚拟化环境的可靠性.

Reliability Architecture to Isolate the Driver Inside the VM

Using virtualization technology to integrate resources has become an important mean to improve the resource utilization of current high-performance servers. Thus the reliability of virtualization technology is very crucial to the service quality of high- performance server. However, the driver fault greatly impacts not only the reliability of operating system inside the virtual machine but also the reliability of the servers. In light of issue, this paper presents a driver isolation architecture inside the virtual machine to improve its reliability. It establishes the authorization table by monitoring the memory information which are used by the driver, captures the driver's write operations by setting the write protection of the shadow page table corresponding to the kernel space of the virtual machine, and judges the correctness of write operations of the isolated driver with the authorization table. Currently, the architecture can isolate drivers inside the virtual machine without modifying them. Experimental results show that the architecture can isolate 84.63% injection faults which cause system crashes with the performance loss less than 20%, and therefore effectively improves the reliability of the virtualization environment.