Computer Science ›› 2018, Vol. 45 ›› Issue (9): 46-51.doi: 10.11896/j.issn.1002-137X.2018.09.006

• NASAC 2017 • Previous Articles     Next Articles

Linux Container Cluster Networking Approach for Multiple Tenants

ZHU Yu-jian1,2, MA Jun-ming1, AN Bo1,2, CAO Dong-gang1,2   

  1. Key Lab of High Confidence Software TechnologiesPeking University,Ministry of Education,Beijing 100871,China1
    School of Electronic Engineering and Computer Science,Peking University,Beijing 100871,China2
  • Received:2017-07-11 Online:2018-09-20 Published:2018-10-10

Abstract: At present,more and more cloud platforms begin to use Linux container cluster to provide runtime environment for cloud services.But how to build a stable and high-performance network for a user’s Linux container cluster under multi-tenant circumstance is an important technical problem.A networking approach of Linux container cluster for multiple tenants was proposed in this paper.Compared with that of Kubernetes,the proposed approach simplifies the network architecture and introduces network isolation.The network can meet the needs under multi-tenant circumstance.This paper described the design of the approach with a small and large scale of clusters and users and explained the implementation of it in a virtual cloud operating system Docklet.The source codes are open source on GitHub.Besides,evaluation results show that the performance of container network of the proposed approach is close to the original network.The TCP export downlink bandwidth is different from the original one within 0.4% and the TCP internal bandwidth gets about 3.39% loss.The batch job and long service applications are also well supported by the approach.

Key words: Cloud computing, Containers networking, Linux containers, Multiple tenants, Software defined network

CLC Number: 

  • TP393
[1]FELTER W,FERREIRA A,RAJAMONY R,et al.An updated performance comparison of virtual machines and linux containers[C]∥2015 IEEE International Symposium on Performance Analysis of Systems and Soft-ware(ISPASS).IEEE,2015:171-172.
[2]SEO K T,HWANG H,MOON I,et al.Performance comparison analysis of linux container and virtual machine for building cloud[C]∥Networking and Communication.2014:105-111.
[3]VERMA A,PEDROSA L,KORUPOLU M,et al.Large-scale
cluster management at Google with Borg[C]∥Proceedings of the Tenth European Conference on Computer Systems.ACM,2015:18.
[4]张阜兴.知乎万级规模容器平台架构和实战[EB/OL].(2016-11-18)[2017-07-11].http://www.infoq.com/cn/presentations/platform-architecture-and-combatof-zhihu-container-platform.
[5]WANG H,SHI P,ZHANG Y.Jointcloud:A Cross-cloud copperation Architecture for integrated internet Service Customization[C]∥IEEE,International Conference on Distributed Computing Systems.IEEE,2017:1846-1855.
[6]CUI W,ZHAN H,LI B,et al.Cluster as a Service:a Container based Cluster Sharing Approach with multi-user Support[C]∥2016 IEEE Symposium on Service-Oriented System Engineering(SOSE).IEEE,2016:111-118.
[7]BERNSTEIN D.Containers and cloud:From lxc to docker to
kubernetes[J].IEEE Cloud Computing,2014,1(3):81-84.
[8]BURNS B,Grant B,Oppenheimer D,et al.Borg,omega,and kubernetes[J].Communications of the ACM,2016,59(5):50-57.
[9]MARMOL V,JNAGAL R,HOCKIN T.Networking in contai-ners and container clusters[J/OL].https://www.mendeley.com/research-papers/networking-containers-container-clusters1.
[10]The Kubernetes Authors.Kubernetes OpenVSwitch GRE/VxLAN networking [EB/OL].[2017-07-08].https://kubernetes.io/docs/admin/ovs-networking.
[11]MERKEL D.Docker:lightweight linux containers for consistent development and deployment[OL].http://docs.docker.com.
[12]Docker Inc.Docker Documentation [EB/OL].[2017-07-10].https://docs.docker.com.
[1] GAO Shi-yao, CHEN Yan-li, XU Yu-lan. Expressive Attribute-based Searchable Encryption Scheme in Cloud Computing [J]. Computer Science, 2022, 49(3): 313-321.
[2] GENG Hai-jun, WANG Wei, YIN Xia. Single Node Failure Routing Protection Algorithm Based on Hybrid Software Defined Networks [J]. Computer Science, 2022, 49(2): 329-335.
[3] ZHANG Geng-qiang, XIE Jun, YANG Zhang-lin. Accelerating Forwarding Rules Issuance with Fast-Deployed-Segment-Routing(FDSR) in SD-MANET [J]. Computer Science, 2022, 49(2): 377-382.
[4] WANG Zheng, JIANG Chun-mao. Cloud Task Scheduling Algorithm Based on Three-way Decisions [J]. Computer Science, 2021, 48(6A): 420-426.
[5] PAN Rui-jie, WANG Gao-cai, HUANG Heng-yi. Attribute Access Control Based on Dynamic User Trust in Cloud Computing [J]. Computer Science, 2021, 48(5): 313-319.
[6] CHEN Yu-ping, LIU Bo, LIN Wei-wei, CHENG Hui-wen. Survey of Cloud-edge Collaboration [J]. Computer Science, 2021, 48(3): 259-268.
[7] DONG Shi. Survey on Software Defined Networks Security [J]. Computer Science, 2021, 48(3): 295-306.
[8] WANG Wen-juan, DU Xue-hui, REN Zhi-yu, SHAN Di-bin. Reconstruction of Cloud Platform Attack Scenario Based on Causal Knowledge and Temporal- Spatial Correlation [J]. Computer Science, 2021, 48(2): 317-323.
[9] JIANG Hui-min, JIANG Zhe-yuan. Reference Model and Development Methodology for Enterprise Cloud Service Architecture [J]. Computer Science, 2021, 48(2): 13-22.
[10] MAO Han-yu, NIE Tie-zheng, SHEN De-rong, YU Ge, XU Shi-cheng, HE Guang-yu. Survey on Key Techniques and Development of Blockchain as a Service Platform [J]. Computer Science, 2021, 48(11): 4-11.
[11] GAO Ya-zhuo, LIU Ya-qun, ZHANG Guo-min, XING Chang-you, WANG Xiu-lei. Multi-stage Game Based Dynamic Deployment Mechanism of Virtualized Honeypots [J]. Computer Science, 2021, 48(10): 294-300.
[12] WANG Qin, WEI Li-fei, LIU Ji-hai, ZHANG Lei. Private Set Intersection Protocols Among Multi-party with Cloud Server Aided [J]. Computer Science, 2021, 48(10): 301-307.
[13] ZHNAG Kai-qi, TU Zhi-ying, CHU Dian-hui, LI Chun-shan. Survey on Service Resource Availability Forecast Based on Queuing Theory [J]. Computer Science, 2021, 48(1): 26-33.
[14] LEI Yang, JIANG Ying. Anomaly Judgment of Directly Associated Nodes Under Cloud Computing Environment [J]. Computer Science, 2021, 48(1): 295-300.
[15] XU Yun-qi, HUANG He, JIN Zhong. Application Research on Container Technology in Scientific Computing [J]. Computer Science, 2021, 48(1): 319-325.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!