LIRE Laboratory, Constantine II University-Abdelhamid Mehri
HOLACONF - Cloud Forward 2015 Conference From Distributed to Complete Computing
Pr. Faiza BELALA and Dr. Chafia BOUANAKA
HAMZA SAHLI
1. Introduc+on
2. Bigraphical Reac+ve Systems (BRS)
3. Modelling Cloud Systems and Their Elas+c Behavior 4. Reachability Checking
5. Conclusion
4
What is Cloud Compu+ng?(*): Na+onal Ins+tute of Standards and Technology (NIST)
Cloud Forward 2015 12/10/15
According to NIST (*) « Cloud compu*ng is a model for enabling ubiquitous, convenient, on-‐demand network access to a shared pool of configurable compu*ng resources that can be rapidly provisioned and released with minimal management effort or service provider interac*on. This cloud model is composed of five essen*al characteris*cs, three service models, and four deployment models »
5
• The emergence of the cloud has raised new issues and new securityconcerns.
• A DDoS a@ack, is an explicit a@empt to make a server, a service or a network unavailable to users by flooding the target request queue with fake requests.
• Cloud accessibility from everywhere exposes it to various types of web-‐ based a@acks suck as the DDoS (distributed denial of service) a@acks.
Cloud Forward 12/10/15
6
« The degree to which a system is able to adapt to workload changes by
provisioning and deprovisioning resources in an autonomic manner »
Herbst and colleagues, 2013.
Cloud Forward 2015 12/10/15 1. Horizontal scale; 2. VerQcal scale; 3. MigraQon.
• According to the classificaQon of Galante and Bona, the elasQcity can be provided using three fundamental methods:
7
• The lack of a generic and exhausQve methodology for modeling and analyzing cloud-‐based systems and their elasQcity.
Cloud Forward 12/10/15
• Formal methods a crucial step to reduce the modelling complexity and enhance the verificaQon of cloud-‐based systems and their elasQc behavior. Modeling and analyzing challenges:
Solu+on:
à An approach based on bigraphical reacQve systems (BRS) for modeling the structure and behavior aspects of cloud systems and Maude language for the verificaQon of elasQcity property.
9
• Graphical formalism for modelling, execuQng and analyzingubiquitous compuQng systems.
• Meta-‐model which emphasizes both locality and connecQvity.
10
12/10/15 Cloud Forward 2015
Formally a bigraph takes the form: 𝐺=(𝑉, 𝐸, 𝑐𝑡𝑟𝑙, 𝐺↑P , 𝐺↑L ) :𝐼→𝐽
§ V and E are respecQvely finite sets of nodes and edges
§ 𝑐𝑡𝑟𝑙=𝑉→𝐾 is a control map.
§ 𝐺↑P =(𝑉, 𝑐𝑡𝑟𝑙, 𝑝𝑟𝑛𝑡):𝑚→𝑛 is the place graph.
• 𝑝𝑟𝑛𝑡 :𝑚⨄↑▒𝑉 →𝑉 ⨄↑▒𝑛 is a parent map.
• 𝑚 is a finite ordinal number which represents sites.
11
12/10/15 Cloud Forward
Formally a bigraph takes the form: 𝐺=(𝑉, 𝐸, 𝑐𝑡𝑟𝑙, 𝐺↑P , 𝐺↑L ) :𝐼→𝐽
§ 𝐺↑L =(𝑉, 𝐸, 𝑐𝑡𝑟𝑙, 𝑙𝑖𝑛𝑘):𝑋→𝑌 is the link graph. • 𝑙𝑖𝑛𝑘 :𝑋⨄↑▒𝑃 →𝐸 ⨄↑▒𝑌 is the link map.
• 𝑋, Y , Y are respecQvely sets of are respecQvely sets of inner inner andand outer names outer names. .
• 𝑃 is a set of is a set of ports. ports.
§ 𝐼= 〈𝑚,𝑋〉 represents the inner face. § 𝐽= 〈𝑛, 𝑌〉 represents the outer face.
12
• Bigraphical ReacQve Systems consist of a category of bigraphs and aset of reacQon rules.
• ReacQon rules define the dynamics of bigraphs (NesQng and Linking).
A reacQon rule (𝑅, 𝑅′, 𝜂) consists of a redex (𝑅:𝑚→𝐽) which may be
transformed to a reactum (𝑅↑′ :𝑚↑′ →𝐽) to rewrite the bigraph where 𝜂: 𝑚↑′ → 𝑚 is map is map of ordinals. of ordinals.
12/10/15 Cloud Forward 2015
14
• Formal mapping based on correspondences between cloud system and BRS concepts.
12/10/15 Cloud Forward 2015
Cloud elements Bigraphical concepts Cloud system structure
Cloud system
Bigraph 𝐶𝑆 =( 𝑉↓𝐶𝑆 , 𝐸↓𝐶𝑆 ,
𝑐𝑡𝑟𝑙↓𝐶𝑆 ,𝐶𝑆↑𝑃 ,𝐶𝑆↑𝐿 )
Front-‐end, back-‐end Root: (0,1) Client, data center, load
balancer, server, container,
virtual machine, service Node: 𝑣∈𝑉↓𝐶𝑆 Node idenQty Control: 𝑘∈𝐾↓𝐶𝑆
InteracQon Edge/Hyper edge: 𝑒↓𝑖 ∈𝐸↓𝐶𝑆 Abstract element Site: 𝑠↓𝑖 ∈𝑆↓𝐶𝑆
Cloud system elas+c behavior
ElasQcity acQon ReacQon rule : C𝑆 →ℛ ┴ 𝐶 𝑆↑′ /
ℛ=(𝑅,𝑅↑′ ,𝜂)
• Each idenQfied cloud e l e m e n t h a s a precise semanQcs in the theory of BRS.
• Cloud system elasQc behavior is formally d e fi n e d u s i n g reacQon rules.
15
12/10/15 Cloud Forward Front-‐End/Back-‐End Loaded Server Open Link Addi+onal VM Nodes16
12/10/15 Cloud Forward 2015
• Each reacQon rule represent an elasQcity acQon which can be : triggered in response to workload changes, and applied in a specific cloud level (so_ware, pla`orm and infrastructure).
• This work focus only on modelling horizontal elasQcity and migraQon methods.
• Cloud-‐based systems elasQc behavior is expressed trough reacQon rules: C𝑆 →ℛ ┴ 𝐶𝑆↑′ / ℛ=(𝑅,𝑅↑′ ,𝜂).
• AddiQonal reacQon rules are defined to express other behavioral situaQons (e.g. service allocaQon).
17
Cloud system BRS
Configura+on CS Bigraph: 𝐶𝑆 =(𝑉↓𝐶𝑆 ,𝐸↓𝐶𝑆 ,𝑐𝑡𝑟𝑙↓𝐶𝑆 ,𝐶𝑆↑𝑃 ,𝐶𝑆↑𝐿 )
Reconfigura+on from CS to CS’. Meta-‐ReacQon rule: 𝐶𝑆 →ℛ ┴ 𝐶𝑆↑′ / ℛ=(𝑅,𝑅↑′ ,𝜂)
Infrastructure Level
Vm instance replica+on (horizontal scale)
𝑆𝐸.𝑉𝑀.(𝑆|𝑆↑′ |𝐿)𝑑 → 𝑆𝐸.𝑉𝑀.(𝑆)𝑉𝑀′.(𝑆′)|𝑑
Vm instance consolida+on (horizontal scale)
𝑆𝐸.𝑉𝑀.(𝑆)𝑉𝑀′.(𝑆′)|𝑑 →𝑆𝐸.𝑉𝑀.(𝑆|𝑆′)𝑑
Virtual machine migra+on
𝑆𝐸.(𝑉𝑀.(𝑑)|𝐿|𝑑′)|𝑆𝐸′.(𝑑′′)→ 𝑆𝐸.(𝑑↑′ )|𝑆𝐸′.(𝑉𝑀.(𝑑)|𝑑′′)
Plaaorm Level
Container instance replica+on (horizontal scale)
𝑆𝐸.𝐶𝑁.(𝑆|𝑆↑′ |𝐿)𝑑 → 𝑆𝐸.𝐶𝑁.(𝑆)𝐶𝑁′.(𝑆′)|𝑑
Container instance consolida+on (horizontal scale)
𝑆𝐸.𝐶𝑁.(𝑆)𝐶𝑁′.(𝑆′)|𝑑 →𝑆𝐸.𝐶𝑁.(𝑆|𝑆′)𝑑
Container redeployment (migra+on)
𝑆𝐸.(𝐶𝑁.(𝑑)|𝐿|𝑑′)|𝑆𝐸′.(𝑑′′)→ 𝑆𝐸.(𝑑↑′ )|𝑆𝐸′.(𝐶𝑁.(𝑑)|𝑑′′)
Service Level
Service instance replica+on (horizontal scale)
𝑆𝐸.(𝑉𝑀.𝑆𝑑 |𝑑↑′ )→ 𝑆𝐸.(𝑉𝑀.𝑆𝑆↑′ |𝑑 |𝑑↑′ )
Service instance consolida+on (horizontal scale)
𝑆𝐸.(𝑉𝑀.𝑆𝑆↑′ |𝑑 |𝑑↑′ ) → 𝑆𝐸.(𝑉𝑀.𝑆𝑑 |𝑑↑′ )
Service redeployment (migra+on)
18
12/10/15 Cloud Forward 2015
Virtual Machine Instance Replica+on
Loaded Virtual Machine New Vm Instance Load Shared 𝑺𝑬.𝑽𝑴.(𝑺|𝑺↑′ |𝑳)𝒅 → 𝑺𝑬.𝑽𝑴.(𝑺)𝑽𝑴′.(𝑺′)|𝒅
20
12/10/15 Cloud Forward 2015
• Maude language was used as alternaQve to overcome these different limits.
• Maude is a high-‐level formal specificaQon language based on
equaQonal and rewriQng logics.
• Tools built around BRS as BigMC (bigraphical model-‐checker) and DBtk are very limited and specific to some applicaQon domains.
21
12/10/15 Cloud Forward
• The syntax of this Maude specificaQon is fully inspired from the bigraph
term language. The specificaQon is composed of the following modules:
• A projecQon from the BRS-‐based model of cloud systems to Maude
language.
1. BiCLOUD_SYNTAX : The model’s signature and semanQcs.
2. BiCLOUD_DYNAMIC: Behavioral aspects of the model through rewrite rules. 3. BiCLOUD_CHECK: states describing the elasQcity property (scale-‐up and scale-‐down states) specifica+on + simula+on (execu+on) verifica+on
• The proposed Maude-‐based approach is generic enough and may be
22
12/10/15 Cloud Forward 2015
• Maude’s search command and model-‐checking invariants technique are used in this work to verify the elasQcity property under finite reachability assumpQons.
• The syntax of the search command conforms to the following general scheme: search ∶ <Term-‐1> <SearchArrow> <Term-‐2> such that <Condi+on> • Verifying the elasQcity property consists of checking that the cloud system is
scaling up, when the workload rises and scaling down when it drops.
In our case that means checking that the states (scale-‐up and scale-‐down) defined in the maude module BiCLOUD_CHECK are reachable from an iniQal state (<Term-‐1>) .
23
12/10/15 Cloud Forward Reached States Ini+al State End of Search25
12/10/15 Cloud Forward
• Further refinements and extensions to our bigraphical model of systems
to include addiQonal elasQcity aspects as the verQcal elasQcity.
• A formal modeling and verificaQon approach for cloud systems and their
elasQcity based on bigraphical reacQve systems (BRS) and maude language.
• Apply our approach on large-‐scale cloud-‐based systems.
• Verify other proprieQes related to elasQc cloud-‐based systems.
Contribu+on: