Xen Community Update. Ian Pratt, Citrix Systems and Chairman of Xen.org

Transcription

1 Xen Community Update Ian Pratt, Citrix Systems and Chairman of Xen.org 1

2 Outline Project Status Xen Client Initiative Xen Cloud Platform New Xen 4.0 Features 2

3 Announcement The Xen Advisory Board is excited to announce that Fujitsu and VA Linux have accepted invitations to join the board! 3

4 Xen Today ~18% enterprise server market share (Yankee, Aug 08) >80% of the Public Cloud is Xen based World's largest virtualization deployments are Xen based Development Community: over 50 Companies, 25 Universities, from 25 Countries, ~250 developers More than 20,000 code submissions Used in Severs, Desktops, Laptops, Storage Appliances, Network Appliances and Smart Phones x86, IA64, ARM support

5 Xen Powers the World s Infrastructure Clouds Xen is great. It s powerful and easy to use. But most important is the very active community around it. That was a very big reason for us in selecting Xen. Werner Vogels CTO, Amazon.com

6 Xen Tops Performance Comparisons Xen is the Porsche of hypervisors Keith Ward, Virtualization Review Xen outperforms ware ESX 3.5 by 41% in user scalability tests. The Tolly Group

7 Xen Hypervisor Pioneers of OS Para-virtualization First and Best to support new CPU, chipset, and Smart IO Technologies

8 Xen Client Initiative 8

9 The Xen Client Initiative Formed in 2007 to develop Xen for desktop and laptop Develop enhanced power management, USB, WiFi, WWAN, 3D Graphics, fingerprint reader, multi-touch, etc Support for latest hardware technologies Tiny footprint hypervisor, Embeddable in Flash memory or small disk partition Aiming to make virtualization ubiquitous on client devices... 9

10 Client Hypervisor Benefits Security, Manageability, Supportability, Auditability Building Multi-Level Secure systems Run multiple s with policy controlled information flow E.g. Personal ; Corporate ; for web browsing; for banking Trusted hypervisor provides secure isolation Enables out-of-band management and policy enforcement Malware detection, remote access, image update, backup, VPN, etc. Requires a true type-1 hypervisor architecture Xen is ideally suited to this! 10

11 Xen Client Architecture Personal Business Control Domain Service Xen Hypervisor Audio Disk USB ACPI GPU NIC x86 Hardware TXT TPM

12 Business & Personal Environments Business Personal Locked Down No Local App Installs Tightly Managed Self-Service Corporate App Installs Allows Local App Installs Minimal Management Virus Scanner Security Patches No SLA Self-Service Wipe

13 Xen Cloud Platform 13

14 Xen Cloud Platform (XCP) XCP Expands Xen.org s remit beyond the core hypervisor, to create a full virtual infrastructure layer for Cloud deployments Simplify and streamline use of Xen by Cloud providers and vendors Promote greater standardisation of components between vendors Advanced virtual infrastructure to enable Virtual Private Datacenters rather than just Virtual Private Servers Multi-tenant hosts, networking, storage, etc Promote interoperability between xen-based clouds and other clouds Drive standards activities via DMTF 14

15 August 2009 XCP Announcement 15

16 XCP Status Seeking proposals, code contributions and offers of development support Draft v0.1 proposal available for download from xen.org, seeking comment & feedback Easy install ISO, build from source 16

17 Where Xen Cloud Platform Fits Management API & OVF Format Mgt State Mgt State Mgt State Resource Pool Mgt State

18 XCP 0.1 Draft proposal Xen 3.4; Linux ; optimized dom0 file system xapi toolstack Resource Pools;, host, networking and storage management; snapshots and checkpoints; live and persistent performance statistics; status alerting; role-based access control; OVF/CIM support Windows PV Drivers; installer etc. Coming soon: vswitch multi-tenant networking 18

19 New Open vswitch Isolation Resource control Multi-tenancy Visibility Security Hypervisor Hypervisor Hypervisor Open Source Virtual Switch maintained at Rich layer 2 feature set

20 Distributed vswitch Built-in policy-based ACLs move with s Hypervisor Virtual Interface Hypervisor (VIF) {MAC, IP} ACLs permit tcp eq domain permit tcp eq domain permit tcp eq domain permit udp eq domain permit udp eq domain permit udp eq domain permit tcp eq 123 Hypervisor Distributed Virtual Switch

21 Distributed vswitch Isolation Resource control Multi-tenancy Visibility Security Hypervisor Hypervisor Hypervisor Distributed Virtual Switch Distributed Virtual Switch Tenant A Tenant B

22 Xen 4.0 Features 22

23 Hardware Fault Tolerance Restart-HA monitors hosts and s to keep apps running Hardware Fault Tolerance with deterministic replay or checkpointing Xen s Software-Implemented Hardware Fault Tolerance enables true High Availability for unmodified applications and operating systems

24 Hardware Fault Tolerance University of British Columbia s Remus project is now in xen development branch Smart checkpointing approach yields excellent performance executes in parallel with checkpoint transmission, with all externally visible state changes suppressed until checkpoint receipt acknowledged Checkpoints delta compressed Checkpointing possible across wide-area, even for multivcpu guests 24

25 SR-IOV SR-IOV: Single Root IO Virtualization Virtualization friendly IO devices High performance, high efficiency Enables even the most demanding applications to now be virtualized World First, demonstrated at Intel Developer Forum in September! 25

26 SR-IOV NIC Demonstration Dell 10G Switch Dell R710 Server XenServer and Intel 10G SR-IOV NIC Dell R710 Server XenServer and Intel 10G SR-IOV NIC Dell R710 Server XenServer and Intel 10G SR-IOV NIC NFS Common Storage w/openfiler Full 20Gb/s bi-directional throughput to s Low latency, High CPU efficiency Live relocation between hosts - Even hosts with different NICs 26

27 CPU (%) Network Performance % s/w only 123% 103% basic smart NIC SR-IOV NIC Type-0 100% native usercopy kern xen1 grantcopy kern0 New Smart NICs reduce CPU overhead substantially Care must be taken with type-2/3 NICs to ensure benefits of portability and live relocation are not lost xen0

28 Conclusions The Xen Community continues to grow from strength to strength Xen s architecture makes it #1 in security, with great performance From Cloud to Client Xen 4.0 will be a major milestone release! 28