Abstract
As a lightweight virtualization technology, containers are attracting much attention and widely deployed in the cloud data centers. To provide consistent and reliable performance, cloud providers should ensure resource isolation since each host consists of multiple containers sharing the host kernel. As a mainstream container system, Docker uses CGroup to provide CPU, memory, and disk resource isolation. Unfortunately, all present solutions ignore the network resource, leading to the resource competition and violating the performance of networked hosts. Although several researches discuss the possibility of leveraging Linux Traffic Control (TC) module to guarantee network bandwidth, they fail to capture the diversity and dynamics of container network resource demands and therefore cannot be applied to container-level network traffic control. In this paper, we propose a Container Network Traffic Control (CNTC) framework which can provide strong isolation and container-level management for network resource with joint consideration of container characteristics and quality of service. To simplify the traffic control, we also design a series of APIs which allow inexpert programmers to perform complicated traffic control on each container. Through experiment results, we show that CNTC works well in all network modes of containers.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Containers: The future of virtualization & sddc. https://goo.gl/Mb3yFq
Linux advanced routing & traffic control. https://www.lartc.org/
Linux control groups. https://www.kernel.org/doc/Documentation/cgroup-v1/cgroups.txt
Linux namespace. https://www.kernel.org/doc/Documentation/namespaces/
Linux traffic control next generation. http://tcng.sourceforge.net/
The truth about docker container lifecycles. https://goo.gl/Wcj894
Barker, S., Shenoy, P.: Empirical evaluation of latency-sensitive application performance in the cloud. In: Proceedings of ICMR, pp. 35–46. ACM (2010)
Dua, R., Raja, A.R., Kakadia, D.: Virtualization vs containerization to support PaaS. In: Proceedings of IC2E, pp. 610–614. IEEE (2014)
Herbein, S., et al.: Resource management for running HPC applications in container clouds. In: Kunkel, J.M., Balaji, P., Dongarra, J. (eds.) ISC High Performance 2016. LNCS, vol. 9697, pp. 261–278. Springer, Cham (2016). https://doi.org/10.1007/978-3-319-41321-1_14
Jeyakumar, V., Alizadeh, M., Mazières, D., Prabhakar, B., Kim, C., Greenberg, A.: Eyeq: practical network performance isolation at the edge. In: Proceedings of NSDI, pp. 297–312. USENIX (2013)
Khalid, J., Rozner, E., Felter, W., Xu, C.: Iron: isolating network-based CPU in container environments. In: Proceedings of NSDI, pp. 1–17. USENIX (2018)
Ma, S., Jiang, J., Li, B., Li, B.: Maximizing container-based network isolation in parallel computing clusters. In: Proceedings of ICNP, pp. 1–10. IEEE (2016)
Mogul, J.C., Popa, L.: What we talk about when we talk about cloud network performance. In: Proceedings of SIGCOMM, pp. 44–48. ACM (2012)
Popa, L., Kumar, G., Chowdhury, M., Krishnamurthy, A., Ratnasamy, S., Stoica, I.: Faircloud: sharing the network in cloud computing. In: Proceedings of SIGCOMM, pp. 187–198. ACM (2012)
Popa, L., Yalagandula, P., Banerjee, S., Mogul, J.C., Turner, Y., Santos, J.R.: Elasticswitch: practical work-conserving bandwidth guarantees for cloud computing. In: Proceedings of SIGCOMM, pp. 351–362. ACM (2013)
Rodrigues, H., Santos, J.R., Turner, Y., Soares, P., Guedes, D.: Gatekeeper: supporting bandwidth guarantees for multi-tenant datacenter networks. In: Proceedings of WIOV, pp. 784–789. USENIX (2011)
Sharma, P., Sharma, L., Shenoy, P.: Containers and virtual machines at scale: a comparative study. In: Proceedings of Middleware, pp. 1–13. ACM (2016)
Shieh, A., Kandula, S., Greenberg, A., Kim, C., Saha, B.: Sharing the data center network. In: Proceedings of NSDI, pp. 309–322. USENIX (2011)
Stoica, S., Pan, R., Vahdat, A., Varghese, G.: Netshare and stochastic netshare: predictable bandwidth allocation for data centers. In: Proceedings of SIGCOMM, pp. 5–11. ACM (2012)
Suo, K., Zhao, Y., Chen, W., Rao, J.: An analysis and empirical study of container networks. In: Proceedings of INFOCOM, pp. 1–9. IEEE (2018)
Acknowledgements
This work is supported by National Key Research and Development Program under grant 2016YFB1000501, National Science Foundation of China under grant No.61732010, and Pre-research Project of Beifang under grant FFZ-1601.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Switzerland AG
About this paper
Cite this paper
Gu, L. et al. (2019). CNTC: A Container Aware Network Traffic Control Framework. In: Miani, R., Camargos, L., Zarpelão, B., Rosas, E., Pasquini, R. (eds) Green, Pervasive, and Cloud Computing. GPC 2019. Lecture Notes in Computer Science(), vol 11484. Springer, Cham. https://doi.org/10.1007/978-3-030-19223-5_15
Download citation
DOI: https://doi.org/10.1007/978-3-030-19223-5_15
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-19222-8
Online ISBN: 978-3-030-19223-5
eBook Packages: Computer ScienceComputer Science (R0)