Mechanism for System Resource Sharing in a Multi-Tenant Platform-as-a-Service (PaaS) Environment in a Cloud Computing System

• US 20130227560A1
• Filed: 02/29/2012
• Published: 08/29/2013
• Est. Priority Date: 02/29/2012
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: McGrath, Michael P., Lamourine, Mark A.
• Granted Patent: US 9,058,198 B2
• Time in Patent Office: Days
• US Class Current: 718/1
• CPC Class Codes: G06F 2209/485 Resource constraint
• CPC Class Codes: G06F 2209/504 Resource capping
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: Y02D 10/00 Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

A mechanism for system resource sharing in a multi-tenant PaaS environment in a cloud computing system is disclosed. A method of embodiments includes receiving, by a virtual machine (VM), identification of resource-usage groups that each define resource constraints to apply to applications having a type of the resource-usage group, establishing a resource control policy on the VM for each of the identified resource-usage groups, the resource control policy to enforce the resource constraints of its associated resource-usage group, configuring a plurality of resource control tools of the VM to implement each resource control policy, identifying a resource-usage group of an application to be created on the VM, applying, by the one or more resource control tools to the application, the resource control policy of the identified resource-usage group of the application, and executing the application with the defined resource constraints on the VM.

Claims

1. A computer-implemented method, comprising:

receiving, by a virtual machine (VM) executing on a computing device, identification of one or more resource-usage groups, each of the one or more resource-usage groups defining resource constraints to apply to applications having a type of the resource-usage group;

establishing a resource control policy on the VM for each of the identified one or more resource-usage groups, the resource control policy to enforce the resource constraints of its associated resource-usage group;

for each established resource control policy, configuring a plurality of resource control tools of the VM to implement the resource control policy;

identifying, by the VM, a resource-usage group of an application to be created on the VM;

applying, by the one or more resource control tools to the application, the resource control policy of the identified resource-usage group of the application; and

executing the application with the defined resource constraints on the VM, the application co-existing on the VM with other applications having different owners than an owner of the application.

2. The computer-implemented method of claim 1, wherein the resources comprise CPU, memory, disk I/O, and network I/O.

3. The computer-implemented method of claim 1, wherein the plurality of resource control tools comprise at least one of a kernel resource usage tool, a disk storage control tool, a network traffic control tool.

4. The computer-implemented method of claim 3, wherein the kernel resource usage tool is Linux™

Control Groups (cgroups), the disk storage control tool is Linux™

Disk Quota, and the network traffic control tool is Linux™

Traffic Control (tc).

5. The computer-implemented method of claim 4, wherein applying the resource control policy of the identified resource-usage group of the application further comprises:

placing files of the application in a specified location of a file system of the VM, the specified location configured by Disk Quota to control disk space of the application according to the resource constraints of the resource-usage group of the application; and

placing an ID of a process of the application into a cgroup established for the application that implements the resource constraints of the resource-usage group of the application.

6. The computer-implemented method of claim 1, further comprising, for each of the resource-usage groups, creating a mapping in the VM of the resource-usage group to configurations of the one or more resource control tools that implement the resource control policy of the resource-usage group.

7. The computer-implemented method of claim 1, wherein the VM is configured to host applications of one resource-usage group of the one or more resource-usage groups.

8. The computer-implemented method of claim 1, wherein the identifying the resource-usage group of the application further comprises:

receiving a request to create the application from a server orchestration system; and

determining the resource-usage group of the application based on identifying information of the application included in the request.

9. The computer-implemented method of claim 8, wherein the server orchestration system operates on a broker layer of a Platform-as-a-Service (PaaS) system that includes the VM, the PaaS system implemented in a cloud computing system.

10. A system, comprising:

a memory;

a processing device communicably coupled to the memory; and

a virtual machine (VM) to virtualize resources of the memory and the processing device, the VM operable to;

receive identification of one or more resource-usage groups, each of the one or more resource-usage groups defining resource constraints to apply to applications having a type of the resource-usage group;

establish a resource control policy on the VM for each of the identified one or more resource-usage groups, the resource control policy to enforce the resource constraints of its associated resource-usage group;

for each established resource control policy, configure a plurality of resource control tools of the VM to implement the resource control policy;

identify a resource-usage group of an application to be created on the VM;

apply, by the one or more resource control tools to the application, the resource control policy of the identified resource-usage group of the application; and

execute the application with the defined resource constraints on the VM, the application co-existing on the VM with other applications having different owners than an owner of the application.

11. The system of claim 10, wherein the resources comprise CPU, memory, disk I/O, and network I/O.

12. The system of claim 10, wherein the plurality of resource control tools comprise at least one of a Linux™

Control Groups (cgroups) kernel resource usage tool, the disk storage control tool is a Linux™

Disk Quota disk storage control tool, a Linux™

Traffic Control (tc) network traffic control tool, and a Pluggable Authentication Module (PAM) limits module.

13. The system of claim 12, wherein applying the resource control policy of the identified resource-usage group of the application further comprises:

placing files of the application in a specified location of a file system of the VM, the specified location configured by Disk Quota to control disk space of the application according to the resource constraints of the resource-usage group of the application; and

placing an ID of a process of the application into a cgroup established for the application that implements the resource constraints of the resource-usage group of the application.

14. The system of claim 10, further comprising, for each of the resource-usage groups, creating a mapping in the VM of the resource-usage group to configurations of the one or more resource control tools that implement the resource control policy of the resource-usage group.

15. The system of claim 10, wherein the identifying the resource-usage group of the application further comprises:

receiving a request to create the application from a server orchestration system, wherein the server orchestration system operates on a broker layer of a Platform-as-a-Service (PaaS) system that includes the VM, the PaaS system implemented in a cloud computing system; and

determining the resource-usage group of the application based on identifying information of the application included in the request.

16. A non-transitory machine-readable storage medium including data that, when accessed by a machine, cause the machine to perform operations comprising:

receiving, by a virtual machine (VM) executing on a computing device, identification of one or more resource-usage groups, each of the one or more resource-usage groups defining resource constraints to apply to applications having a type of the resource-usage group;

establishing a resource control policy on the VM for each of the identified one or more resource-usage groups, the resource control policy to enforce the resource constraints of its associated resource-usage group;

for each established resource control policy, configuring a plurality of resource control tools of the VM to implement the resource control policy;

identifying, by the VM, a resource-usage group of an application to be created on the VM;

applying, by the one or more resource control tools to the application, the resource control policy of the identified resource-usage group of the application; and

executing the application with the defined resource constraints on the VM, the application co-existing on the VM with other applications having different owners than an owner of the application.

17. The non-transitory machine-readable storage medium of claim 16, wherein the resources comprise CPU, memory, disk I/O, and network I/O.

18. The non-transitory machine-readable storage medium of claim 16, wherein the plurality of resource control tools comprise at least one of a kernel resource usage tool, a disk storage control tool, a network traffic control tool.

19. The non-transitory machine-readable storage medium of claim 18, wherein the kernel resource usage tool is Linux™

Control Groups (cgroups), the disk storage control tool is Linux™

Disk Quota, and the network traffic control tool is Linux™

Traffic Control (tc).

20. The non-transitory machine-readable storage medium of claim 16, wherein the identifying the resource-usage group of the application further comprises:

receiving a request to create the application from a server orchestration system; and

determining the resource-usage group of the application based on identifying information of the application included in the request.