基于容器的Web运行环境轻量级虚拟化方法

Web运行环境、Web服务及Web应用的虚拟化是减轻Web操作系统安全风险的一种有效方法,然而Web运行环境的虚拟化仍然存在不少挑战,如：执行时间、资源负载和兼容性等。为解决Web操作系统在安全性、执行时间、资源负载和兼容性方面的问题，提出了一种Web运行环境轻量级虚拟化方法,采用Docker容器技术实现进程级别的隔离。本虚拟化方法可在一个基本内核上支持运行多种Web运行环境的容器。此外,为了减轻容器创建负载,提出了容器启动机制；为减轻系统资源负载,进行了系统的轻量化处理。在嵌入式设备的实验结果表明,该虚拟化方法在执行时间、资源负载及兼容性方面都具有较优表现。

Lightweight Virtualization Solution for Web Runtime base on Container

Virtualization of web runtime, web services, and web apps is considered a valuable way to mitigate security risks on web operating systems. However, there are still challenges in web runtime virtualization such as running time, resource overhead, and compatibility. To solve the problems of security, running time, resource overhead and compatibility in web operating systems, this paper proposes a lightweight virtualization solution for web runtime which implements process isolation with Docker container. The proposed virtualization solution can host multiple independent web runtime containers on a single kernel. Furthermore, the implementation presents a container starting mechanism to reduce container creation overhead, as well as lightweight of the system to reduce resource overhead. The evaluation results on embedded device demonstrate that the virtualization solution is feasible in terms of running time, resource overhead, and compatibility.