Abstract: In this issue of "Deciphering Huawei Cloud EulerOS Computing Power Release Technology" live broadcast, Huawei Cloud DTSE technology evangelist Lu Weidi shared with developers the Huawei Cloud EulerOS ( "HCE OS" for short) is the core advantage and key technology in improving customer experience on the cloud.
This article is shared from the HUAWEI CLOUD community " Huawei Cloud EulerOS Brings Smooth Migration Experience to Developers with 4 Major Features ", author: Selected by HUAWEI CLOUD Community.
In this issue of "Deciphering Huawei Cloud EulerOS Computing Power Release Technology" live broadcast, Huawei Cloud DTSE technology evangelist Lu Weidi shared with developers the performance, security, and elasticity of the traditional OS on the cloud. HCE OS")'s core advantages and key technologies in improving customer experience on the cloud.
1. Find out what HCE OS is
Huawei Cloud EulerOS, HCE OS for short, is a high-performance, high-reliability, and high-security commercial cloud operating system built by Huawei Cloud based on the openEuler open source community. It can replace public images such as CentOS. On the basis of inheriting the openEuler ecosystem, HCE OS is optimized in combination with HUAWEI CLOUD scenarios to provide users and developers with the best choice of HUAWEI CLOUD OS.
2. The key features of HCE OS4 are born in the cloud
When traditional enterprises go to the cloud, they face a series of challenges such as application elasticity, security, and fast operation and maintenance on the cloud. HCE OS has made key optimizations for problems such as inability to isolate resources, potential data security risks, and difficult operation and maintenance:
2.1 Solve the problem of isolation and elasticity of cloud-native resources through the hybrid technology of online and offline services
In the cloud-native scenario, HCE OS combined with CCE realizes the mixed deployment technology of online and offline services, increasing the resource utilization rate from 15% to 40%:
- CPU scheduling level: Through online preemption, offline kill, load balancing enhancement and SMT scheduling technology, ensure that the CPU priority of online business is guaranteed.
- Memory management level: through priority memory recovery and dynamic water level control technology, to ensure that online business memory requests are prioritized to be satisfied
- Cache QoS level: Through Cache interference prediction and Cache tenant plane isolation technology, ensure that online services run with high performance
- Network QoS: Through traffic label management and dynamic bandwidth allocation of tenants, online business traffic is ensured to be stable
2.2 Improve basic performance and scenario performance through the "Application Acceleration" function
HCE OS achieves a comprehensive improvement in system performance through efforts in IO management, memory management, and compiler optimization.
- In terms of IO performance optimization, technologies such as IO_URING, IO smart cache, and eBPF file prefetching are introduced to improve the overall IO throughput of the system;
- In terms of memory optimization, it supports PB-level large memory management and hierarchical memory management to reduce memory performance loss;
- In the field of compilers, through the use of Bisheng compiler and Bisheng JDK, the performance of various user applications under various hardware devices is improved.
2.3 Realize massive data security in cloud systems through full-stack independent innovation and security compliance
In government agencies, financial institutions and other large-scale systems and businesses related to people's livelihood, independent innovation of system security and security compliance have become two core concerns. HCE currently meets the relevant national security requirements in these two aspects.
In terms of full-stack controllability:
- Realize full-stack independent innovation on platforms such as Kunpeng
- Passed national secret certification
In terms of security compliance:
- Support national secret algorithms, including SM2, SM3, SM4, etc., users can develop and deploy applications that meet the specifications based on HCE
- Passed the national level protection 2.0 three-level standard certification, meeting the core business requirements of carrying government cloud
2.4 Solve the million-scale system upgrade problem through a new upgrade framework
In order to achieve large-scale system upgrades, a new upgrade system is created through in-depth cooperation with Huawei Cloud OSM and other services.
On the upgrade framework side, functions such as data collection, rolling upgrade, Repo management, compliance management, and baseline management are implemented, enabling users to visualize the overall upgrade process.
Inside the HCE OS, through four key technologies, the patch upgrade process is not aware of the business, and the interruption time is second-level:
- OSM2.0 upgrade framework + SUT technology, supports batch rapid deployment of rpm packages and exception rollback across the entire network
- HCE core hot replacement technology supports non-destructive second-level hot replacement after business transformation;
- HCE kernel hot patch technology supports rapid repair of high-risk vulnerabilities;
- HCE peripheral package hot upgrade, support systemd, dbus and other resident services without interruption upgrade;
On the basis of these key technologies, through the combination of different upgrade technologies in different scenarios, various upgrade goals of customers can be achieved.
3. 4 tips to help developers migrate smoothly to HCE OS
HCE OS provides four types of tools to help customers complete system migration efficiently. To help developers understand how to use the migration tool, they can log in to HUAWEI CLOUD to experience two-step system migration for free: https://lab.huaweicloud.com/testdetail_2384
- One-click difference evaluation: One-click generation of hardware, software, and system configuration compatibility difference evaluation reports
- Quick Compatibility Completion: Provide southbound hardware testing tools
- Efficient migration & tuning: automatic generation of code-level migration recommendations; automatic production configuration files
- Automatic batch deployment: IMS rapid image distribution and deployment
Click to follow and learn about Huawei Cloud's fresh technologies for the first time~