Difference between revisions of "GSoC Ideas"

From Linux-VServer

Jump to: navigation, search
(Minimalistic Web Frontend)
(catchg)
 
(3 intermediate revisions by one user not shown)
Line 12: Line 12:
 
=== libvirt Integration and Testing ===
 
=== libvirt Integration and Testing ===
  
Userspace, scripting, testing
+
''Userspace, scripting, testing''
 +
 
 +
preliminary work exists, probably needs to be adapted
 +
to recent versions and integrated with the libvirt folks.
  
 
=== iptables proxy and policy daemon ===
 
=== iptables proxy and policy daemon ===
  
Kernelside proxy, Userspace policy daemon
+
''Kernelside proxy, Userspace policy daemon''
 +
 
 +
Linux-VServer uses IP Isolation, so things like iptables cannot be allowed
 +
inside a guest without applying some sanity checks and general host policy.
 +
 
 +
Part of this is a kernel side proxy mechanism, which will relay the netlink
 +
commands issued from e.g. iptables inside a guest to a policy daemon running
 +
on the host.
 +
 
 +
The other part is the policy daemon which has to check the requests for
 +
plausibility, and if applicable implement them in a way which doesn't harm
 +
the host or other guests (e.g. on a separate chain).
  
 
=== hard limits for CFS scheduler ===
 
=== hard limits for CFS scheduler ===
  
Kernel modification (target upstream)
+
''Kernel modification (target upstream)''
 +
 
 +
Linux-VServer implements a Token Bucket (TB) scheduler extension which
 +
sits ontop of the Linux scheduler able to limit the CPU resources on
 +
a per guest basis.
 +
 
 +
Recent Linux provides a Completely Fair Scheduler (CFS) which is missing
 +
a hard limit feature, which should be implemented in way that mainline
 +
(kernel.org) can make use of it.
 +
 
 +
[[Category:Ideas]]

Latest revision as of 20:34, 21 October 2011

Contents

[edit] Google Summer of Code Ideas

[edit] Minimalistic Web Frontend

Userspace, php or similar

Web Frontend or Framework to do basic administrational tasks like

  • creating and destroying guests
  • starting and stopping guests
  • monitor status and resources

[edit] libvirt Integration and Testing

Userspace, scripting, testing

preliminary work exists, probably needs to be adapted to recent versions and integrated with the libvirt folks.

[edit] iptables proxy and policy daemon

Kernelside proxy, Userspace policy daemon

Linux-VServer uses IP Isolation, so things like iptables cannot be allowed inside a guest without applying some sanity checks and general host policy.

Part of this is a kernel side proxy mechanism, which will relay the netlink commands issued from e.g. iptables inside a guest to a policy daemon running on the host.

The other part is the policy daemon which has to check the requests for plausibility, and if applicable implement them in a way which doesn't harm the host or other guests (e.g. on a separate chain).

[edit] hard limits for CFS scheduler

Kernel modification (target upstream)

Linux-VServer implements a Token Bucket (TB) scheduler extension which sits ontop of the Linux scheduler able to limit the CPU resources on a per guest basis.

Recent Linux provides a Completely Fair Scheduler (CFS) which is missing a hard limit feature, which should be implemented in way that mainline (kernel.org) can make use of it.

Personal tools