Shared Isolating Resource Allocation in Multi-Tenant Cloud
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud computing environments, malfunctioning devices can inadvertently access computing resources intended for other customers due to improper identifier usage, leading to resource isolation issues in multi-tenant settings.
Innovation Solution
Implementing a shared resource allocator that manages a pool of resources using a least-recently-deallocated allocation scheme, where resources are allocated based on the longest time since deallocation, increasing the likelihood of detecting and addressing improper usage by identifying the oldest deallocated resource for reallocation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If shared resources are allocated quickly to meet customer demand, then service availability and productivity are improved, but the risk of malfunctioning devices accessing other customers' resources increases
Solution Approach 1:
The system performs preliminary actions by deallocating shared resources and placing them in a pool before reallocation. This creates a time buffer between deallocation and reallocation, allowing detection of improper usage before the resource is reassigned to another customer, thus preventing resource isolation issues while maintaining service availability.
2Quantity of substance
If shared resources are reused immediately after deallocation, then resource utilization efficiency is improved, but the probability of detecting improper usage by malfunctioning devices decreases
Solution Approach 1:
A shared resource pool acts as an intermediary between deallocation and reallocation. Deallocated resources are placed in this pool with associated timestamps, creating a buffer zone that delays immediate reuse. This intermediary mechanism allows the system to monitor and detect improper usage while managing resource utilization efficiently.
3Reliability
If a long time passes before resource reallocation, then detection probability is improved, but resource utilization efficiency and productivity deteriorate
Solution Approach 1:
The system applies partial action by dealing with resources individually rather than waiting for a fixed time period. Each deallocated resource is immediately placed in the pool and made available for future allocation based on demand. This approach achieves detection probability through the pooling mechanism without imposing a blanket time delay that would reduce overall resource utilization.
Data Source
AI summary
Disclosed are various embodiments for allocating shared resources. A request to allocate a shared isolating resource is received. The shared isolating resource operates to isolate a plurality of customer resources in a multi-tenant environment. In response to the request to allocate, a least recently deallocated shared isolating resource is removed from a pool of available shared isolating resources. The least recently deallocated shared isolating resource is provided to at least one device using the shared isolating resource.