Domain-Based Resource Isolation in Multi-Core Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current operating systems lack effective means to isolate processor resources, leading to unequal distribution and potential denial of service attacks, as they do not provide adequate prioritization or resource limitation across applications.
Innovation Solution
Implementing domain-based resource isolation in multi-core systems, where processor cores are grouped by performance criteria and workload patterns, allowing for targeted allocation and optimization of workload requests through a hypervisor layer that manages logical partitions and deploys workloads to appropriate cores.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If general purpose operating systems allocate resources equally to all applications, then resource distribution is simple and manageable, but quality of service cannot be guaranteed and denial of service attacks cannot be prevented
Solution Approach 1:
The patent segments processor cores into different domains (e.g., privileged domain and unprivileged domain) and assigns applications to specific domains based on their resource requirements and security levels. This segmentation enables differentiated resource allocation where privileged applications receive guaranteed resources while unprivileged applications are limited, thereby ensuring quality of service for critical applications and preventing denial of service attacks without requiring complex per-application management
Solution Approach 2:
The patent applies local quality by providing different resource allocation policies to different domains. Privileged domain applications receive prioritized access and resource guarantees, while unprivileged domain applications receive limited resources. This localized differentiation allows the system to ensure quality of service for specific critical applications while maintaining simple overall management through domain-based grouping
2Reliability
If per-process priority and limits are implemented, then quality of service and resource limitation are achieved, but administrative flexibility and manageability are reduced
Solution Approach 1:
The patent segments applications into domains based on their resource requirements and administrative groupings. By managing resource allocation at the domain level rather than individual process level, the system achieves effective resource limitation and quality of service guarantees while significantly improving administrative manageability. Administrators can manage entire domains as units rather than configuring each process individually
3Reliability
If resource isolation is provided to objects like volume groups and file systems, then access control is improved, but processor-level isolation is lacking
Solution Approach 1:
The patent extends the resource isolation concept from traditional objects (volume groups, file systems) to processor cores by creating domain-based partitions at the CPU level. This segmentation provides processor-level isolation that prevents applications from consuming excessive processor resources while maintaining access control mechanisms. The domain structure enables versatile processor isolation capabilities that work alongside existing object-level isolation mechanisms
Data Source
AI summary
Embodiments of the present invention provide a system, method, and program product for domain based resource isolation in multi-core systems. A computing device determines an operation being attempted on a workload request identified with a first domain identifier. The computing device determines a processor core identified with a second domain identifier. In response to determining that processor cores identified with the second domain identifier can service workload requests identified with the first domain identifier, the computing device deploys the workload request to the processor core for servicing.