Debloat the Cloud with Unikraft

It’s Time to Debloat the Cloud with Unikraft
Dr. Felipe Huici - CEO &Co-Founder Unikraft GmbH

The Private/Public Cloud
Extremely bloated
On all/most of the time
Bad for the
environment
Great scalability
Easy to use
Multitude of services
Cloud 1.0

The Private/Public Cloud
Bloated
Expensive
Not eco-friendly
Great scalability
Easy to use
Multitude of services
Cloud 1.0 Current

Good for massive cloud providers ...

...and hardware manufacturers...

...and hardware manufacturers...
...but not for most everyone else:

Your App
The Bloat Problem (pt.1)

Comprised
of...
Your App
Business Logic

Comprised
of...
Operating system
Your App
System libraries
System services
Business Logic

Comprised
of...
Your App
Unused Operating System
Unused libraries
Unused services
Business Logic

Time
t=0

Time
t=0
idle

Time
t=0
idle active
req

Time
t=0
idle active idle
req

Time
t=0
idle active active
idle idle
req req

You only ever want an espresso
You’re running a full café
Problem
Solution

Specialization Virtual Machines
+

Specialization Virtual Machines
+
Unikernels
=

Copyright © Unikraft UG.
Unikernels in a Nuts hell
Web server

Web server
3rd party
libraries

Web server
3rd party
libraries
OS
services

Web server
General Purpose OS (e.g., Linux)
3rd party
libraries
OS
services
OS
kernel

Web server
3rd party
libraries
OS
services
OS
kernel
Web server
Unikernel

Web server
3rd party
libraries
OS
services
OS
kernel
Web server
Unikernel
Lots of devel time!

Toolkit to Easily Build,
Deploy and Monitor Unikernels

1. Library operating system and unikernel development kit
2. Well-defined APIs
3. Target POSIX compatibility
4. Target seamless integration with existing frameworks
The Unikraft Model

20-50% cheaper in some of our tests on AWS

Why aren’t unikernels
widely deployed?

1. Performance
2. Application &platform support
3. Framework integration
4 . Debugging
Barriers to Deployment

1. Performance
a. Small but still monolithic
b. Underperforming code
c. “Slow” languages

Unikraft provides better performance
On Unikraft, 82% of increase compared to Docker (NGINX throughput)

Unikraft provides better memory cons umption and s torage
Image Size
docker.io/nginx:1.15.6 42.62 MB
unikraft.io/nginx:1.15.6 1.3 MB
Memory Usage Disk Space

Unikraft Boot Time s

Unikraft offers better optimization

1. Performance
a. Language-specific unikernels
b. Application porting required
c. Insufficient syscall support
4 . Debugging

What Unikraft Supports (Sample)
(ongoing)

POSIX Compatibility - Binary Mode

POSIX Compatibility - Source/Mus l (WiP)

Platform (and libc) Support
arch:
hyper:
libc: nolibc

Platform (and libc) Support
arch:
hyper:
libc: nolibc newlib

1. Performance
a. Inexistent standard frameworks
b. Missing toolkits
4 . Debugging

Seamles s Deployment &
Integration
Kubernetes
kraft Prometheus
Easily build your
unikraft unikernel
Deploy extremely
efficient Unikraft
images seamless
against your
Kubernetes cluster
Monitor your
Unikraft instances
through a standard
and state-of-the-art
monitoring platform
VSCode
Easy development
on the most popular
IDE platform
🚀🚀

kraft
● Easily manage multiple libraries
from different sources
● Quickly access updates and
change between versions
● Automatically download
application source
dependencies

Unikraft Prometheus Exporter + Grafana Dashboard

1. Performance
4 . Debugging
a. No standard tools (e.g., gdb)
b. No profiling tools
c. Poor or no documentation

Monitoring &Debugging Features
● ukdebug
○ Logging/Print system
○ Assertions
○ Tracepoints
○ GDB server

● ukdebug
○ Assertions
○ Tracepoints
○ GDB server
● ukt e s t
○ Unit Testing

● ukdebug
○ Assertions
○ Tracepoints
○ GDB server
● ukt e s t
○ Unit Testing
● uks t or e
○ Directory of library getters and setters

● ukdebug
○ Assertions
○ Tracepoints
○ GDB server
● ukt e s t
○ Unit Testing
● uks t or e
○ Directory of library getters and setters
● uni pr of ( t ool )
○ Performance analysis with stack snapshots

● Compile-time specialization strategy
● Minimal Trusted Computing Base (TCB
● Immutable
● Default off: no unnecessary open ports, daemons,
sshd, etc.
Intrins ic Security Features

Unikraft Linux Foundation Project

https ://bit.ly/UnikraftDis cord

+ Romanian (yearly) Hackathon – September
+ UK Hackathon – Fall
+ Asian Hackathon – Spring
+ Your Hackathon here!!

The Lightweight Virtualization Company
https://github.com/unikraft/unikraft
https://unikraft.io
@UnikraftSDK
<info@unikraft.io>

The Lightweight Virtualization Company
https://github.com/unikraft/unikraft
https://unikraft.io
@UnikraftSDK
<info@unikraft.io>
Pleas e
Star us on
GitHub!

Debloat the Cloud with Unikraft

Recommended

Recommended

More Related Content

Similar to Debloat the Cloud with Unikraft

Similar to Debloat the Cloud with Unikraft (20)

Recently uploaded

Recently uploaded (20)

Debloat the Cloud with Unikraft