Method and device for controlling Web application resources based on Linux container

Abstract

The invention discloses a method and device for controlling Web application resources based on a Linux container and relates to the field of cloud computing. The method includes the steps that an application resource control group is created; the mapping relation between a Web application ID and an application resource control group ID is set; the mapping relation of the Web application ID, a userthread ID and a kernel thread ID is set; according to the Web application ID, an interface of the application resource control group is called to write the kernel thread ID into a task control list of the corresponding application resource control group. When the kernel thread is dispatched, a resource control strategy of the application resource control group is executed according to the kernelthread ID so as to achieve fine control of Web application resource quotas using the threads as particle sizes.

Description

technical field [0001] The invention relates to the field of cloud computing, in particular to a method and device for controlling Web application resources based on Linux containers. Background technique [0002] Lightweight web applications are hosted and run on the basis of web application engines. All applications on the engine share the same host resources, and an exception (such as an infinite loop) in an individual application may exhaust the resources of the entire host. Therefore, it is necessary to control the resource quota of the web application. [0003] Such as figure 1 As shown, web application engines usually use language-level sandbox technology (such as custom class loaders, interface security policies, etc.) Binding affects the portability of the application, and the application engine runs in the user mode of the operating system, and cannot control the resources in the kernel mode (such as kernel threads, CPU physical cores, etc.). [0004] In additio...

AI Technical Summary

Problems solved by technology

[0003] like figure 1 As shown, web application engines usually use language-level sandbox technology (such as custom class loaders, interface security policies, etc.) Binding, which affects the portability of the application, and the application engine runs in the user mode of the operating system, and cannot control kernel mode resources (such as kernel threads, CPU physical cores, etc.)

[0004] In addition, the current mainstream Linux container technologies (such as LXC, Docker, etc.) mainly control resources at the granularity of processes, such as figure 2 As shown in the figure, container technology can be used to package web applications and application engines as a whole, and run in isolation in the form of process containers. However, application engines usually occupy hundreds of megabytes of memory, which increases the overhead of deploying and running lightweight web applications.

Images