Computer system and method for transferring executables between partitions

In one embodiment, a computer system comprises a plurality of processors, first software code for registering executables, creating partitions, and assigning executables to partitions, wherein the first software code assigns non-registered executables to a first partition, second software code for monitoring a utilization rate associated with the first partition, examining executables of the first partition when the utilization rate exceeds a first limit, and transferring executables having accessed an amount of resources greater than a second limit to a second partition.

TECHNICAL FIELD

The present application is generally related to a computer system and method for transferring executables between partitions.

BACKGROUND

Many enterprises have experienced a dramatic increase in the number of computers and applications employed within their organizations. When a business group in an enterprise deploys a new application, it is possible to add one or more dedicated server platforms to host the new application. This type of environment is sometimes referred to as “one-app-per-box.” As more business processes have become digitized, a “one-app-per-box” environment leads to an inordinate number of server platforms. As a result, administration costs of the server platforms increase significantly. Moreover, the percentage of time that the server platform resources are actually used (the utilization rate) can be quite low. To address these issues, many enterprises have consolidated multiple applications onto common server platforms to reduce the number of platforms and increase the system utilization rates.

In such consolidated environments, certain executables may have undesired effects on other executables. For example, some executables can consume a significant amount of available resources (e.g., processor resources, memory resources, and disk input/output (10) resources). Other executables will then not be able to obtain sufficient resources to make adequate progress. Traditional methods to address this issue typically involve creating multiple groups to support the operations of respective groups of executables. The groups may be defined in a number of ways including by user login, user class, and application name. Limitations are also defined upon resources to be accessed by the various groups. The definition of groups in this manner generally prevents one executable from consuming a significant portion of all system resources. However, an executable can still consume a significant portion of the resources of its group.

SUMMARY

In one embodiment, a computer system comprises a plurality of processors, first software code for registering executables, creating partitions, and assigning executables to partitions, wherein the first software code assigns non-registered executables to a first partition, second software code for monitoring a utilization rate associated with the first partition, examining executables of the first partition when the utilization rate exceeds a first limit, and transferring executables having accessed an amount of resources greater than a second limit to a second partition.

In another embodiment, a method comprises registering executables of a computer system, assigning registered executables to a subset of a plurality of partitions, assigning non-registered executables to a first partition of the plurality of partitions, monitoring a utilization rate of system resources associated with the first partition, examining executables within the first partition when the utilization rate exceeds a first limit, and transferring executables having accessed an amount of resources greater than a second limit to a second partition of the plurality of partitions.

In one embodiment, a computer system comprises means for registering executables, means for assigning executables to a plurality of partitions of the computer system, wherein the means for assigning assigns non-registered executables to a first partition of the plurality of partitions, means for monitoring a utilization rate of the first partition, means for analyzing utilization rates of executables of the first partition, when the utilization rate of the first partition exceeds a first limit, and means for transferring executables from the first partition to a second partition for executables having the utilization rates greater than a second limit.

DETAILED DESCRIPTION

Some representative embodiments are directed to computer systems and methods that isolate “overaggressive” executables (executables that consume an undue amount of resources) to prevent the executables from degrading system performance. In some representative embodiments, a plurality of computing partitions are created. As used herein, a partition is a physical or logical mechanism for isolating operational environments within a single server or multiple servers. A scheduling agent assigns executables to respective partitions. Some executables may be registered with the scheduling agent. The registration process may involve communicating resource requests or service level agreements to the agent. The agent then responds by assigning the registered executable to a newly created partition that corresponds to the provided information. Furthermore, one of the partitions is designated as a default partition or a “common area” partition. The scheduling agent assigns executables that are not registered to the default partition. The default partition is assigned a predetermined amount of system resources. Another partition is used to isolate executables. This “isolation” partition is given a relatively smaller amount of resources. The smaller amount of resources ensures that isolated executables can make reasonable progress while not consuming resources needed by other executables.

In some embodiments, the scheduling agent monitors the default partition. The scheduling agent determines whether the utilization level associated with the default partition exceeds a predefined limit of the system resources. If the utilization level does not exceed the predefined limit, the scheduling agent allows executables within the partition to continue operations. However, if the predefined limit is exceeded, the scheduling agent analyzes the resource utilization by the individual executables within the partition. Executables that are identified as having one or several undesirable characteristics are immediately transferred to the isolation partition. A message is then sent to an administrator. The administrator may then decide whether to register the identified executables, leave the executables in the isolation partition, stop their execution, or perform any other suitable action.

Referring now to the drawings,FIG. 1depicts system100according to one representative embodiment. System100includes host operating system120that controls low-level access to hardware layer130of the platform. In one embodiment, host operating system120includes virtualization layer121within its kernel as an example. Virtualization layer121creates software constructs (logical devices) that correspond to the physical resources of hardware layer130. Hardware layer130may include any number of physical resources such as CPUs131-1through131-N, memory132, network interfaces133, and input/output (I/O) interfaces134.

In one embodiment, virtual resources (e.g., one or several virtual CPUs, virtual memory, a virtual network interface card, a virtual I/O interface, etc.) are assigned to each partition141-1through141-N. The number of virtual CPUs may exceed the number of physical CPUs131. The CPU virtualization may be implemented by providing a set of registers, translation lookaside buffers, and other control structures for each virtual CPU. Accordingly, each partition141is isolated from other partitions141. Additionally, each partition141is used to execute a respective guest operating system142. The virtual resources assigned to the partition141appear to the guest operating system142as the hardware resources of a physical server. Guest operating system142may, in turn, be used to execute one or several executables143. The executables143may be various user-space applications, system daemons, or any other suitable programs.

As shown inFIG. 1, partition141-1is the default partition. Specifically, executables that are not registered with scheduling agent125are assigned to the default partition. An appropriate amount of system resources may be assigned to the default partition to enable multiple executables to perform at satisfactory levels. Also, as shown inFIG. 1, partition141-2is the isolation partition. A relatively smaller amount of resources are assigned to partition141-2. The smaller amount of resources are used to enable a limited number of isolated executables to make some amount of forward progress.

The other partitions (141-3through141-N) are used to support the operations of registered executables. Registration interface123may be used to register one or several executables with scheduling agent125. Registration interface123may be accessed by suitable calls by the executable being registered. Alternatively, registration interface123can be accessed by an administrator through a command line interface or other suitable interface (not shown). Registration information124passed to registration interface123may include resource information or resource requests. For example, the resource information may include service level agreements that identify minimum access to processor resources and/or other resources. Scheduling agent125creates partitions141according to the resource information and assigns the executable(s) to a group corresponding to the newly created partition. The assignment of executables is reflected in group data126. Also, scheduling agent125assigns executables that have not been registered to the default group.

Each group is supported by a respective partition141(partition141-1for the default group, partition141-2for the isolation group, and partitions141-3through141-N for the registered groups). Scheduling agent125further schedules access to CPU resource131-1through131-N by executables within the partitions141using resource shares127. Resource shares127may define the amount of access to processor resources that each group will receive on average.

Additionally, scheduling agent125monitors the utilization of system resources by default partition141-1. Specifically, scheduling agent125obtains the utilization rate associated with partition141-1by performing a suitable system call. If the utilization rate of partition141-1exceeds a predetermined amount, scheduling agent125may attempt to identify overaggressive executables within the default group. In some embodiments, scheduling agent125analyzes the executables in partition141-1in an ordered manner. For example, some executables (such as scheduling agent125) are allowed to consume as much resources as requested by design. Those executables may be omitted from the analysis. Also, using prior knowledge, certain executables may be known to be more probable candidates. The analysis may begin with those executables. During the analysis, scheduling agent125may examine the utilization of each executable within one or several prior scheduling intervals. Based upon an executable's processor utilization within the interval(s) (as maintained by scheduling agent125), scheduling agent125may classify the executable as an overaggressive executable.

If an overaggressive executable is identified, the identified executable is transferred from default partition141-1to isolation partition141-2. The overaggressive executable will then not hinder the operations of other executables within the default group.

Upon transferring an executable to isolation partition141-2, scheduling agent125generates a notification for the administrator. The administrator may then examine the executable to determine an appropriate response. For example, there may be a legitimate reason to allow the executable to obtain a greater amount of system resources. Accordingly, the administrator could register the executable thereby allowing the executable to be transferred to one of partitions141-3through141-N. Alternatively, the administrator may stop further operations of the executable. The administrator may also simply leave the executable within isolation partition141-2until the executable completes its processing.

FIG. 2depicts a flowchart for isolating overaggressive executables according to one representative embodiment. The flowchart can be implemented, in part, using software code. For example, software code defining scheduling agent125and registration interface123can be used for the flowchart ofFIG. 2. The software code can be stored on any suitable computer readable medium.

In block201, a plurality of partitions are created including a default partition and an isolation partition. A partition is a physical or logical mechanism for isolating operational enviromnents within a single server or multiple servers. In block202, share parameters are defined that are related to the amount of system resources (e.g., processor ticks) that each partition will receive, on average, within a scheduling interval. In block203, executables are registered. The registration process may identify resource requests to support the various executables being registered. Upon the receipt of such resource requests, additional partitions are created and the executables are assigned to the newly created partitions (block204). Share parameters are defined for the newly created partitions that correspond to the resource requests. Executables that are not registered are assigned to a default or common partition (block205).

The utilization rate of the default partition is monitored (block206). If the utilization rate is below a predefined limit (block207), the process flow returns to block206to continue monitoring. In some embodiments, the repetitive monitoring of the default partition occurs when a scheduling agent is called by a system interrupt. In one embodiment, the monitoring performed by the scheduling agent occurs once per second and, hence, the overhead imposed by the scheduling agent is relatively low. If the utilization rate is greater than the predefined limit, the process flow proceeds to block208.

In block208, individual executables are examined to determine whether the executables can be identified as accessing an undue amount of resources. In one embodiment, executables within the default partition are examined to determine whether the executables have accessed an amount of processor resources (e.g., processor ticks) during the prior scheduling interval that is greater than a limit. In block209, executables exceeding the limit are transferred to an isolation partition. In block210, an administrator is notified of transferred executables (if any). From block210, the process flow returns to step206.

Some representative embodiments provide an efficient manner of monitoring the use of resources of a computer system and respond to such use. Specifically, some representative embodiments enable the effects of malicious programs (e.g., viruses) on other executables to be minimized. Moreover, other executables that may cause disruptive effects due to bugs, incompatibilities, or other issues may be identified and isolated. The identification of these executables may enable the system administrator to perform appropriate remediation to allow the executables to properly function without harming other executables. Additionally, these activities may be performed with relatively little overhead. Specifically, some representative embodiments need only monitor the utilization rate associated with a single group, or partition. Individual executables are not examined until an overaggressive executable actually begins to access an undue amount of resources.