Abstract:In today's data centers, memory-based key-value systems, such as Memcached and Redis, play an indispensable role in providing high-speed data services. The rapidly growing capacity and quickly falling price of DRAM memory in the past years have enabled us to create a large memory-based key-value store, which is able to serve hundreds of Gigabytes to even Terabytes of key-value data all in memory. Unfortunately, CPU cache in modern processors has not seen a similar growth in capacity, still remaining at the level of a few dozens of Megabytes. Such an extremely low cache-to-memory ratio (less than 0.1%) poses a significant new challenge---the limited CPU cache is becoming a severe performance bottleneck that hinders us from fully exploiting the great potential of high-speed memory-based key-value stores. To address this critical challenge, we propose a highly cache-efficient scheme, called Cavast , to optimize the cache utilization of large-capacity in-memory key-value stores. Our goal is to maximize cache efficiency and system performance without any hardware changes. We first present two light-weight, software-only mechanisms to enable user to indirectly control the cache content at application level. Then we propose a set of optimization policies to address several critical design issues that impair cache's efficacy in the current key-value store systems. By carefully reorganizing the data layout in memory, redesigning the hash indexing structure, and offloading garbage collection, we can effectively improve the utilization of the limited cache space. We have developed a module in Linux as a kernel-level support, and implemented two prototypes based on Memcached and Redis with the proposed Cavast scheme. Our experimental studies show promising results. On a 6-core Intel Xeon processor with only 15-MB cache, we can raise the cache hit ratio up to 82.7% with a very small cache-to-memory ratio (0.023%), and significantly increase the key-value system throughput by a factor of up to 4.2.

Protecting In-memory Data Cache with Secure Enclaves in Untrusted Cloud.

Put an Elephant into a Fridge

Detecting and Mitigating Cache Side Channel Threats on Intel SGX

Distributed Shielded Execution for Transmissible Cyber Threats Analysis

Enclavisor: A Hardware-software Co-design for Enclaves on Untrusted Cloud

Architecture of the Protected Cloud Data Storage Using Intel SGX Technology

MeshUp: Stateless Cache Side-channel Attack on CPU Mesh

Efficiently Hardening SGX Enclaves against Memory Access Pattern Attacks via Dynamic Program Partitioning

Privacy-Preserving Content-Based Similarity Detection Over in-the-Cloud Middleboxes

A New Secure Memory System for Efficient Data Protection and Access Pattern Obfuscation

Ensuring Data Storage Security in Cloud Computing.

DASH: A duplication-aware flash cache architecture in virtualization environment

Occlumency

On the Performance of Intel SGX

EqualVisor: Providing Memory Protection in an Untrusted Commodity Hypervisor

A Framework for Storage Security in Cloud Computing

SEMMA: Secure Efficient Memory Management Approach in Virtual Environment.

Security and Privacy for Mobile Edge Caching: Challenges and Solutions

Secure Cloud Storage with Client-Side Encryption Using a Trusted Execution Environment

SGXLock: Towards Efficiently Establishing Mutual Distrust Between Host Application and Enclave for SGX

A Way Of Key Management In Cloud Storage Based On Trusted Computing