Integrating workloads with differing criticality levels presents a formidable challenge in achieving the stringent spatial and temporal isolation requirements imposed by safety-critical standards such as ISO26262. The shift towards high-performance multicore platforms has been posing increasing issues to the so-called mixed-criticality systems (MCS) due to the reciprocal interference created by consolidated subsystems vying for access to shared (microarchitectural) resources (e.g., caches, bus interconnect, memory controller). The research community has acknowledged all these challenges. Thus, several techniques, such as cache partitioning and memory throttling, have been proposed to mitigate such interference; however, these techniques have some drawbacks and limitations that impact performance, memory footprint, and availability. In this work, we look from a different perspective. Departing from the observation that safety-critical workloads are typically event- and thus interrupt-driven, we mask "colored" interrupts based on the \ac{QoS} assessment, providing fine-grain control to mitigate interference on critical workloads without entirely suspending non-critical workloads. We propose the so-called IRQ coloring technique. We implement and evaluate the IRQ Coloring on a reference high-performance multicore platform, i.e., Xilinx ZCU102. Results demonstrate negligible performance overhead, i.e., <1% for a 100 microseconds period, and reasonable throughput guarantees for medium-critical workloads. We argue that the IRQ coloring technique presents predictability and intermediate guarantees advantages compared to state-of-art mechanisms
翻译:将具有不同关键级别的负载进行集成,是实现ISO26262等安全关键标准所要求的严格空间与时间隔离性能的一项严峻挑战。向高性能多核平台的转变,由于整合后的子系统争夺共享(微架构)资源(如缓存、总线互连、内存控制器)而产生的相互干扰,给所谓的混合关键性系统(MCS)带来了日益增多的难题。研究界已认识到所有这些挑战。因此,人们提出了诸如缓存分区和内存节流等多种技术来缓解此类干扰;然而,这些技术存在一些影响性能、内存占用和可用性的缺陷与局限性。本研究从不同视角出发。基于安全关键负载通常由事件驱动、进而由中断驱动的观察,我们根据服务质量(QoS)评估结果屏蔽“着色”的中断,从而提供细粒度控制以缓解关键负载上的干扰,同时不完全挂起非关键负载。我们提出了所谓的IRQ着色技术。我们在参考高性能多核平台(即Xilinx ZCU102)上实现并评估了IRQ着色。结果表明,性能开销可忽略不计,即每100微秒周期内开销<1%,且能为中等关键性负载提供合理的吞吐量保证。我们认为,与现有技术机制相比,IRQ着色技术在可预测性和中间保证方面具有优势。