Rust-Based Cloud Hypervisor Moves Under Linux Foundation Auspices

[rakhirhif8963]

The Cloud Hypervisor project has found a home at the Linux Foundation, bringing its modular approach to monitoring virtual machines for cloud workloads to the vendor-neutral foundation, The New Stack reports.

Cloud Hypervisor comes during a wave of hypervisor creation, recalled Arjan van de Ven, an Intel fellow and technical sponsor of the project, sharing common roots with other similar projects but offering a modular approach that delivers security and performance along with flexibility.

“We got together at one of the conferences and said, ‘Look, we’re all doing our own thing, it doesn’t make sense.’ But it quickly became clear that there was no one-size-fits-all solution — what works for Lambda doesn’t work for containers. We had to figure out how to split the code because you don’t want to reinvent the wheel, but at china mobile database same time you want to be flexible so you can pick and choose exactly what you need for your problem, for your solution. That’s how we ended up with what is now Cloud Hypervisor,” he said.

Inheritance and modularity
A key tenet of Cloud Hypervisor is its modularity. Keeping the components minimal and letting users choose which ones they include not only ensures better performance, but also helps with security. Legacy hypervisors not built specifically for cloud computing, van de Ven explains, can emulate legacy hardware — even things like floppy disk drives. And Cloud Hypervisor operates on the assumption that you don’t need legacy hardware by default, which he says simplifies things considerably.

“From talking to some of the big cloud companies, it’s clear that their biggest concern is that existing solutions are big monolithic blocks. It’s hard for security teams to prove that certain parts are untouched by incidents. You can show that something isn’t being used for normal purposes, but you can’t show that something isn’t being used by a hacker,” says van de Ven. “The most secure code is code that isn’t even in binary form, right?”