返回
System log isolation for containers
DOI:10.1007/s11704-024-2568-8.png)
摘要
En 中文
Container-based virtualization is increasingly popular in cloud computing due to its efficiency and flexibility. Isolation is a fundamental property of containers and weak isolation could cause significant performance degradation and security vulnerability. However, existing works have almost not discussed the isolation problems of system log which is critical for monitoring and maintenance of containerized applications. In this paper, we present a detailed isolation analysis of system log in current container environment. First, we find several system log isolation problems which can cause significant impacts on system usability, security, and efficiency. For example, system log accidentally exposes information of host and co-resident containers to one container, causing information leakage. Second, we reveal that the root cause of these isolation problems is that containers share the global log configuration, the same log storage, and the global log view. To address these problems, we design and implement a system named private logs (POGs). POGs provides each container with its own log configuration and stores logs individually for each container, avoiding log configuration and storage sharing, respectively. In addition, POGs enables private log view to help distinguish which container the logs belong to. The experimental results show that POGs can effectively enhance system log isolation for containers with negligible performance overhead.
Keyword:
container isolation
system log
cgroup
namespace
cloud computing
期刊
IF:
4.6
论文数:
1.6K
被引数:
2.8K
机构
暂无机构信息
引用论文
MOLECULAR STRUCTURE OF A BINUCLEAR COBALT DIOXYGEN COMPLEX, [Co2(2,6-BIS[BIS(2-PYRIDYLMETHYL)AMINOMETHYL]-4-METHYLPHENOLATO)(BENZOATO)DIOXYGEN] (BF4)2·2H2O双核钴双氧配合物的分子结构,[Co2(2,6-双 [双 (2-吡啶基甲基) 氨基甲基]-4-甲基苯酚) (苯并) 二氧] (BF4)2·2H2O

