Claim Missing Document
Check
Articles

Found 1 Documents
Search
Journal : ILKOM Jurnal Ilmiah

Quantifying of runC, Kata and gVisor in Kubernates Purwoko, Rahmat; Priambodo, Dimas Febriyan; Prasetyo, Arbain Nur
ILKOM Jurnal Ilmiah Vol 16, No 1 (2024)
Publisher : Prodi Teknik Informatika FIK Universitas Muslim Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33096/ilkom.v16i1.1679.12-26

Abstract

The advent of container technology has emerged as a pivotal solution for application developers, addressing concerns regarding the seamless execution of developed applications during the deployment process. Various low-level container runtimes, including runC, Kata Container, and gVisor, present themselves as viable options for implementation. The judicious selection of an appropriate low-level container runtime significantly contributes to enhancing the efficiency of Kubernetes cluster utilization. To ascertain the optimal choice, comprehensive testing was conducted, encompassing both performance and security evaluations of the low-level container runtimes. This empirical analysis aids developers in making informed decisions regarding the selection of low-level container runtimes for integration into a Kubernetes cluster. The performance assessments span five key parameters: CPU performance, memory utilization, disk I/O efficiency, network capabilities, and the overall performance when executing an nginx web server. Three distinct tools—sysbench, iperf3, and Apache Benchmark—were employed to conduct these performance tests.  The findings of the tests reveal that runC exhibits superior performance across all five parameters evaluated. However, a nuanced consideration of security aspects is imperative. Both Kata Container and gVisor demonstrate commendable host isolation, presenting limited vulnerability to exploitation. In contrast, runC exposes potential vulnerabilities, allowing for exploits against the host (worker node), such as unauthorized directory creation and system reboots. This comprehensive analysis contributes valuable insights for developers, facilitating an informed decision-making process when selecting low-level container runtimes within a Kubernetes environment.
Co-Authors Abdul Abror Achmad, Fahdel Adiati, Nadia Paramita Retno Aditama, Whisnu Yudha Afif, Yusrizal Agus Reza Aristiadi Nurwa Ahmad Ashari Ajhari, Abdul Azzam Akhmad Rizal, Akhmad Amiruddin Amiruddin Amiruddin Amiruddin Amiruddin Annisa Nurul Puteri ARIZAL Arya, Primadona Asep Dadan Rifansyah Awalin, Lilik Jamilatul Azzahra, Arsya Dyani Beatrix, Yehezikha Briliyant, Obrina Candra Dhana Arvina Alwan Diaz Samsun Alif Dozy Arti Insani Fachrurozy, Rizky Fadlilah Izzatus Sabila Faizi, Achmad Husein Noor Farida, Yeni Furqan Zakiyabarsi Ghiffari Adhe Permana Girinoto Girinoto, Girinoto Gusti Agung Ngurah Gde K.T. D Hafidz Faqih Aldi Kusuma Handayani, Annisa Dini Henny Yulianti Hermawan Setiawan I Komang Setia Buana, I Komang Indarjani, Santi Ira Rosianal Hikmah Jayanti Yusmah Sari Jeckson Sidabutar La Ode Ahmad Saktianyah La Ode Hasnuddin S. Sagala Lestari, Andriani Adi Mahar Surya Malacca Muhammad Hasbi Muhammad Hasbi Muhammad Yusuf Bambang Setiadji Muhammad Yusuf Bambang Setiadji Mukhamad Najib Nanang Trianto Nanang Trianto Naufal Hafiz Nirsal Nirsal Noorhasanah Zainuddin Nurwa, Agus Reza Aristiadi Obrina Candra Briliyant Olga Geby Nabila Pandi Vigneshwaran Pandi Vigneshwaran Prasetyo, Arbain Nur Prayoga, Arga Prisma Megantoro Purwoko, Rahmat Rabiah Adawiyah Rahmat Purwoko Rahmat Purwoko Rahmawati, Fika Dwi Rizki Putra Prastio Rizky Fachrurozy Sabela Trisiana Oktavia Saptomo, Wawan Laksito Yuly Siswantyo, Sepha Sri Siswanti Suci Pricilia Lestari Suharsono Bantun Sunaringtyas, Septia Ulfa Syaban, Kharis Syahrul Syahrul Tiyas Yulita Wahyu Riski Aulia Putra Windarta, Susila Yulandi Yusuf Bambang Setiadji