基于流量控制的Docker容器网络带宽控制机制

doi:10.11772/j.issn.1001-9081.2019040765

计算机应用 ›› 2019, Vol. 39 ›› Issue (12): 3628-3632.DOI: 10.11772/j.issn.1001-9081.2019040765

基于流量控制的Docker容器网络带宽控制机制

王志伟¹, 杨超²

湖北大学计算机与信息工程学院, 武汉 430062

收稿日期:2019-05-06 修回日期:2019-07-12 发布日期:2019-12-17 出版日期:2019-12-10
作者简介:王志伟(1982-),男,北京人,硕士研究生,主要研究方向:信息安全;杨超(1982-),男,湖北武汉人,副教授,博士,CCF会员,主要研究方向:信息安全。
基金资助:
国家自然科学基金资助项目（61170306）；智能信息处理与实时工业系统湖北省重点实验室开放基金资助项目（znxx2018MS05）。

Bandwidth control mechanism for Docker container network based on traffic control

WANG Zhiwei¹, YANG Chao²

School of Computer Science and Information Engineering, Hubei University, Wuhan Hubei 430062, China

Received:2019-05-06 Revised:2019-07-12 Online:2019-12-17 Published:2019-12-10
Contact: 杨超
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61170306), the Hubei Province Key Laboratory of Intelligent Information Processing and Real-time Industrial System (znxx2018MS05).

摘要/Abstract

摘要： 针对Docker容器缺乏对网络带宽资源进行限制的能力的问题，提出了一种基于流量控制（TC）的Docker容器网络带宽控制机制。首先，基于CGroups文件系统的实时监测机制，利用Linux内核的虚拟文件系统（VFS）作为媒介，将Docker容器创建时设置的网络控制参数传递给Linux内核流量控制器TC；然后，通过引入IFB模块实现上下行带宽控制，并使用rate、ceil及prio参数进行空闲带宽共享及容器优先级控制；最后，控制TC执行具体的网络限制，以实现容器之间灵活的网络资源控制。实验结果表明，该机制在容器独占带宽场景下可有效地将实际容器带宽限制在2%的波动范围内，而在共享空闲带宽场景下可在平均误差0.5%的范围内精准限制容器带宽，同时该机制能够基于优先级弹性地管理资源。该机制具有提供更为原生的接口且无需额外工具配合的优势，可为基于Docker的云平台的细粒度弹性网络资源控制提供便捷有效的解决思路。

关键词: Docker容器, 资源控制, 网络带宽, CGroups机制, 流量控制

Abstract: As Docker container lacks the ability of limiting network bandwidth resources, a bandwidth control mechanism was proposed for Docker container network based on Traffic Control (TC). Firstly, based on the real-time monitoring mechanism of CGroups file system, Virtual File System (VFS) of Linux kernel was used as a medium to pass the network control parameters set when Docker container was created to the Linux kernel controller TC. Then, the Intermediate Functional Block device (IFB) module was introduced to archive uplink and downlink bandwidth control, and the parameters (rate, ceil and prio) were used to achieve idle bandwidth sharing and container priority control. Finally, the specific network limitations were conducted by controlling the TC, and flexible network resource control between containers was realized. The experimental results show that the proposed mechanism can effectively limit the actual container bandwidth within 2% fluctuation range in the container exclusive bandwidth scenario, and can precisely limit the network bandwidth of the container with average 0.5% error range in the shared idle bandwidth scenario. Meanwhile, the mechanism can flexibly manage resources based on priorities. With the advantage of providing a more native interface for Docker and requiring no additional tools, this mechanism can provide a convenient and effective solution for fine-grained elastic network resource control on Docker-based cloud platform.

Key words: Docker container, resource control, network bandwidth, CGroups mechanism, Traffic Control (TC)

中图分类号:

TP393

王志伟, 杨超. 基于流量控制的Docker容器网络带宽控制机制[J]. 计算机应用, 2019, 39(12): 3628-3632.

WANG Zhiwei, YANG Chao. Bandwidth control mechanism for Docker container network based on traffic control[J]. Journal of Computer Applications, 2019, 39(12): 3628-3632.

参考文献

[1] BOETTIGER C. An introduction to docker for reproducible research, with examples from the renvironment[J]. ACM SIGOPS Operating Systems Review, 2015, 49(1):71-79.
[2] 王亚玲,李春阳,崔蔚,等.基于Docker的PaaS平台建设[J].计算机系统应用,2016,25(3):72-77.(WANG Y L, LI C Y, CUI W, et al. Construction of Docker-based PaaS[J]. Computer Systems & Applications, 2016, 25(3):72-77.)
[3] BERNSTEIN D. Containers and cloud:from LXC to Docker to Kubernetes[J]. IEEE Cloud Computing, 2014, 1(3):81-84.
[4] LIU D, ZHAO L. The research and implementation of cloud computing platform based on Docker[C]//Proceedings of the 11th International Computer Conference on Wavelet Active Media Technology and Information Processing. Piscataway:IEEE, 2014:475-478.
[5] KAN C. DoCloud:an elastic cloud platform for Web applications based on Docker[C]//Proceedings of the 18th International Conference on Advanced Communication Technology. Piscataway:IEEE, 2016:478-483.
[6] ISMAIL B I, GOORTANI E M, AB KARIM M B, et al. Evaluation of Docker as edge computing platform[C]//Proceedings of the 2015 IEEE Conference on Open Systems. Piscataway:IEEE, 2015:130-135.
[7] ABDELBAKY M, DIAZ-MONTES J, PARASHAR M, et al. Docker containers across multiple clouds and data centers[C]//Proceedings of the 2015 IEEE/ACM 8th International Conference on Utility and Cloud Computing. Piscataway:IEEE, 2015:368-371.
[8] BELLAVISTA P, ZANNI A. Feasibility of fog computing deployment based on Docker containerization over RaspberryPi[C]//Proceedings of the 18th International Conference on Distributed Computing and Networking. New York:ACM, 2017:Article No. 16.
[9] CHUNG M T, QUANG-HUNG N, NGUYEN M T, et al. Using Docker in high performance computing applications[C]//Proceedings of the 2016 IEEE 6th International Conference on Communications and Electronics. Piscataway:IEEE, 2016:52-57.
[10] LIU Q, ZHENG W, ZHANG M, et al. Docker-based automatic deployment for nuclear fusion experimental data archive cluster[J]. IEEE Transactions on Plasma Science, 2018, 46(5):1281-1284.
[11] XIE B, SUN G, MA G. Docker based overlay network performance evaluation in large scale streaming system[C]//Proceedings of the 2016 IEEE Advanced Information Management, Communicates, Electronic and Automation Control Conference. Piscataway:IEEE, 2016:366-369.
[12] ZHENG Z, WU X, ZHANG Y, et al. QoS ranking prediction for cloud services[J]. IEEE Transactions on Parallel and Distributed Systems, 2013, 24(6):1213-1222.
[13] KHALID J, ROZNER E, FELTER W, et al. Iron:isolating network-based CPU in container environments[C]//Proceedings of the 15th USENIX Symposium on Networked Systems Design and Implementation. Berkeley, CA:USENIX Association, 2018:313-328.
[14] 龙恒.Linux流控工具TC的原理及实用案例分析[J].计算机与现代化,2010(11):80-84,88.(LONG H. TC principle of Linux traffic control tool and it's practical case analysis[J]. Computer and Modernization, 2010(11):80-84, 88.)
[15] 李晓利,郭宇春.QoS技术中令牌桶算法实现方式比较[J].中兴通讯技术,2007,13(3):56-60.(LI X L, GUO Y C. Comparison between token bucket algorithms in QoS technology[J]. ZTE Communications, 2007, 13(3):56-60.)

基于流量控制的Docker容器网络带宽控制机制

Bandwidth control mechanism for Docker container network based on traffic control

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 11

编辑推荐

Metrics

[1]	张晓晗, 冯爱民. 基于经验模态分解和长短期记忆神经网络的短期交通流量预测[J]. 计算机应用, 2021, 41(1): 225-230.
[2]	涂大喜, 蒋宇浩, 徐成, 余林琛. 动态自适应的HTTP流码率渐进切换算法[J]. 计算机应用, 2019, 39(4): 1127-1132.
[3]	彭丽苹, 吕晓丹, 蒋朝惠, 彭成辉. 基于Docker的云资源弹性调度策略[J]. 计算机应用, 2018, 38(2): 557-562.
[4]	唐红张云龙. BitTorrent流量控制方案[J]. 计算机应用, 2011, 31(02): 304-307.
[5]	陈兴蜀林大云王文贤. P2P节点智能选择机制的研究与实现[J]. 计算机应用, 2011, 31(02): 293-297.
[6]	宋迎梅沈富可. 基于P4P的CDN系统中内容分发节点选择算法[J]. 计算机应用, 2009, 29(11): 2928-2931.
[7]	吴钦木罗雪梅李叶松. 动态分布式消息调度方法研究[J]. 计算机应用, 2009, 29(07): 1954-1956.
[8]	谢希张大方谢鲲刘天明. 基于IXP2400的流量控制实现[J]. 计算机应用, 2008, 28(5): 1107-1110.
[9]	李曙红李章兵刘定. 高速公路网入口流量控制的双层规划模型及算法[J]. 计算机应用, 2007, 27(7): 1783-1785.
[10]	王恺. VoIP网关QoS模块的设计与实现[J]. 计算机应用, 2006, 26(6): 1306-1307.
[11]	陈志琦，苏德富，霍林. 一种基于均衡理论的网格资源分配模型[J]. 计算机应用, 2005, 25(05): 1187-1189.