论文标题
使用EBPF进行分解的NVM存储时，安全有效的远程应用程序代码执行
Safe and Efficient Remote Application Code Execution on Disaggregated NVM Storage with eBPF
论文作者
论文摘要
随着NVM存储设备的快速改进，性能瓶颈逐渐转移到网络，从而引起了“数据移动墙”的概念。为了减少网络上的数据移动量，研究人员提出了靠近存储设备的运输操作和计算延伸的近数据计算。但是，在共享的，分解的存储环境中运行任意，用户提供的扩展，对安全，隔离和性能提出了多个挑战。我们没有从头开始解决此问题，而是在这项工作中，我们为利用Linux内核EBPF框架进行编程分解NVM存储设备。 EBPF提供了一种安全，可验证和高性能的方式，可以在共享运行时执行不信任，用户定义的代码。在本文中，我们描述了我们的经验构建第一个原型，该原型支持使用EBPF在存储上的远程操作，讨论我们的方法的局限性以及解决方案的方向。
With rapid improvements in NVM storage devices, the performance bottleneck is gradually shifting to the network, thus giving rise to the notion of "data movement wall". To reduce the amount of data movement over the network, researchers have proposed near-data computing by shipping operations and compute-extensions closer to storage devices. However, running arbitrary, user-provided extensions in a shared, disaggregated storage environment presents multiple challenges regarding safety, isolation, and performance. Instead of approaching this problem from scratch, in this work we make a case for leveraging the Linux kernel eBPF framework to program disaggregated NVM storage devices. eBPF offers a safe, verifiable, and high-performance way of executing untrusted, user-defined code in a shared runtime. In this paper, we describe our experiences building a first prototype that supports remote operations on storage using eBPF, discuss the limitations of our approach, and directions for addressing them.
