User-Isolated Container Deployment with Shared Virtual Machines
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In public cloud computing, the overhead of managing numerous virtual machines for containers leads to inefficient resource utilization, as each container requires separate processing and storage, which is undesirable.
Innovation Solution
A virtual computing resource deployment device that deploys containers within user-specific virtual machines, adjusting resources dynamically based on container requests and deletions to minimize the number of virtual machines per user, ensuring security and optimizing resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a virtual machine is activated for each container to ensure strong isolation performance, then security and isolation are improved, but the number of virtual machines increases leading to reduced resource utilization efficiency
Solution Approach 1:
The patent merges multiple containers from the same user into a single shared virtual machine. The container management unit identifies that multiple containers belong to the same user and allocates them to share the same virtual machine instance, thereby reducing the total number of virtual machines while maintaining user-level isolation and container-level functionality.
Solution Approach 2:
The virtual machine is designed to host multiple containers simultaneously, making it multi-functional. Instead of dedicating one virtual machine per container, the same virtual machine infrastructure serves multiple containers from the same user, improving resource utilization while preserving the required isolation boundaries.
2Reliability
If multiple virtual machines are deployed to host containers for different users, then user isolation is improved, but the overhead of managing numerous virtual machines increases
Solution Approach 1:
The system combines multiple containers from the same user into shared virtual machines, reducing the total count of virtual machines that need to be managed. The container management unit tracks user-container relationships and consolidates allocations, thereby lowering management complexity while preserving user isolation through the virtualization layer.
Solution Approach 2:
The container management unit acts as an intermediary that handles container allocation and tracking. It maintains awareness of which containers belong to which users and manages their deployment across virtual machines, reducing the direct management burden on the virtualization infrastructure and simplifying overall system operations.
3Reliability
If separate virtual machines are used for each container to ensure security, then information leakage risk is reduced, but resource allocation efficiency deteriorates
Solution Approach 1:
The patent merges containers from the same user into shared virtual machine instances. The container management unit identifies common user ownership and consolidates container allocations, reducing the number of virtual machines while maintaining security through user-level access controls and virtualization isolation mechanisms.
Solution Approach 2:
The system applies different isolation levels at different levels of the hierarchy: strong isolation between users via virtual machine boundaries, and controlled sharing within the same user's containers. This local quality approach allows security-critical user isolation while enabling efficient resource sharing where security requirements are lower.
Data Source
AI summary
A virtual computing resource deployment device includes: a container operation reception unit that receives a request for adding a new container from a user; and a container management unit that deploys the new container in a user-use virtual machine, as a virtual machine running a container added by request from the same user as said user. When a host computer running the user-use virtual machine (deployed-to virtual machine) has extra resources necessary for running the new container, the container management unit may instruct a virtual machine management unit, that manages increasing/decreasing resources of a virtual machine, to add the extra resources to the deployed-to virtual machine, and deploy the new container.