Abstract:Cloud computing has become a compelling paradigm built on compute and storage virtualization technologies. The current virtualization solution in the Cloud widely relies on hypervisor-based technologies. Given the recent booming of the container ecosystem, the container-based virtualization starts receiving more attention for being a promising alternative. Although the container technologies are generally considered to be lightweight, no virtualization solution is ideally resource-free, and the corresponding performance overheads will lead to negative impacts on the quality of Cloud services. To facilitate understanding container technologies from the performance engineering's perspective, we conducted two-stage performance investigations into Docker containers as a concrete example. At the first stage, we used a physical machine with “just-enough” resource as a baseline to investigate the performance overhead of a standalone Docker container against a standalone virtual machine (VM). With findings contrary to the related work, our evaluation results show that the virtualization's performance overhead could vary not only on a feature-by-feature basis but also on a job-to-job basis. Moreover, the hypervisor-based technology does not come with higher performance overhead in every case. For example, Docker containers particularly exhibit lower QoS in terms of storage transaction speed. At the ongoing second stage, we employed a physical machine with “fair-enough” resource to implement a container-based MapReduce application and try to optimize its performance. In fact, this machine failed in affording VM-based MapReduce clusters in the same scale. The performance tuning results show that the effects of different optimization strategies could largely be related to the data characteristics. For example, LZO compression can bring the most significant performance improvement when dealing with text data in our case. (Less)

A Docker Container Anomaly Monitoring System Based on Optimized Isolation Forest.

Houdini's Escape

Anomaly Detection of Storage Battery Based on Isolation Forest and Hyperparameter Tuning

Research and implementation of intelligent monitoring for containerized PaaS

Container Anomaly Detection System Based on Rule Mining and Matching

Anomaly Detection and Diagnosis for Container-based Microservices with Performance Monitoring

A Clustered Learning Framework for Host Based Intrusion Detection in Container Environment.

Container Introspection: Using External Management Containers to Monitor Containers in Cloud Computing

Application Oriented Dynamic Resource Allocation for Data Centers Using Docker Containers

Anomaly detection with a container-based stream processing framework for industrial internet of things

Anomaly Detection for Virtualized Data Center Via Outlier Analysis

KubAnomaly: Anomaly detection for the Docker orchestration platform with neural network approaches

OptIForest: Optimal Isolation Forest for Anomaly Detection

ContainerGuard: A Real-Time Attack Detection System in Container-Based Big Data Platform

Two-Stage Performance Engineering of Container-based Virtualization

Self-adaptive Approach for Container-based Cloud Resources Management

DockerWatch: a two-phase hybrid detection of malware using various static features in container cloud

Isolation-Based Anomaly Detection

LSHiForest: A Generic Framework for Fast Tree Isolation Based Ensemble Anomaly Analysis.

Research on optimization strategy of container orchestration technology for cloud computing environment

Implementation and evaluation of a container management platform on Docker: Hadoop deployment as an example