{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,21]],"date-time":"2026-03-21T21:14:41Z","timestamp":1774127681277,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":71,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,4,4]],"date-time":"2019-04-04T00:00:00Z","timestamp":1554336000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["FA8750-10-2-0238, FA8750-11-2-0256, D11AP00266"],"award-info":[{"award-number":["FA8750-10-2-0238, FA8750-11-2-0256, D11AP00266"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CSR-1422544, CNS-1601879, CAREER 1053757, TRUST 0424422"],"award-info":[{"award-number":["CSR-1422544, CNS-1601879, CAREER 1053757, TRUST 0424422"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000161","name":"National Institute of Standards and Technology","doi-asserted-by":"publisher","award":["60NANB15D327, 70NANB17H181"],"award-info":[{"award-number":["60NANB15D327, 70NANB17H181"]}],"id":[{"id":"10.13039\/100000161","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,4,4]]},"DOI":"10.1145\/3297858.3304016","type":"proceedings-article","created":{"date-parts":[[2019,4,4]],"date-time":"2019-04-04T18:38:43Z","timestamp":1554403123000},"page":"121-135","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":69,"title":["X-Containers"],"prefix":"10.1145","author":[{"given":"Zhiming","family":"Shen","sequence":"first","affiliation":[{"name":"Cornell University, Ithaca, NY, USA"}]},{"given":"Zhen","family":"Sun","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, NY, USA"}]},{"given":"Gur-Eyal","family":"Sela","sequence":"additional","affiliation":[{"name":"University of California, Berkeley & Cornell University, Berkeley, CA, USA"}]},{"given":"Eugene","family":"Bagdasaryan","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, NY, USA"}]},{"given":"Christina","family":"Delimitrou","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, NY, USA"}]},{"given":"Robbert","family":"Van Renesse","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, NY, USA"}]},{"given":"Hakim","family":"Weatherspoon","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, NY, USA"}]}],"member":"320","published-online":{"date-parts":[[2019,4,4]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2005. SMP alternatives. https:\/\/lwn.net\/Articles\/164121\/"},{"key":"e_1_3_2_1_2_1","unstructured":"2015. X86 Paravirtualised Memory Management. https:\/\/wiki.xen. org\/wiki\/X86_Paravirtualised_Memory_Management"},{"key":"e_1_3_2_1_3_1","volume-title":"Intel 64 and IA-32 Architectures Software Developer's Manual. Volume 3: System programming Guide","year":"2016","unstructured":"2016. Intel 64 and IA-32 Architectures Software Developer's Manual. Volume 3: System programming Guide (2016)."},{"key":"e_1_3_2_1_4_1","unstructured":"2018. Kernel page-table isolation. https:\/\/en.wikipedia.org\/wiki\/ Kernel_page-table_isolation"},{"key":"e_1_3_2_1_5_1","unstructured":"2018. Performance of Nested Virtualization -- Google Compute Engine. https:\/\/cloud.google.com\/compute\/docs\/instances\/ enable-nested-virtualization-vm-instances#performance"},{"key":"e_1_3_2_1_6_1","unstructured":"2018. Solaris Containers. https:\/\/en.wikipedia.org\/wiki\/Solaris_ Containers"},{"key":"e_1_3_2_1_7_1","unstructured":"2019. Amazon ECS Task Definitions. https:\/\/docs.aws.amazon.com\/ AmazonECS\/latest\/developerguide\/task_definitions.html"},{"key":"e_1_3_2_1_8_1","unstructured":"2019. Best practices for writing Dockerfiles. https:\/\/docs.docker.com\/ develop\/develop-images\/dockerfile_best-practices\/"},{"key":"e_1_3_2_1_9_1","unstructured":"2019. CVE: list of cybersecurity vulnerabilities. https:\/\/cve.mitre.org\/"},{"key":"e_1_3_2_1_10_1","unstructured":"2019. Docker. https:\/\/www.docker.com\/"},{"key":"e_1_3_2_1_11_1","unstructured":"2019. GNU General Public License. https:\/\/www.gnu.org\/copyleft\/ gpl.html"},{"key":"e_1_3_2_1_12_1","unstructured":"2019. gVisor: Container Runtime Snadbox. https:\/\/github.com\/google\/ gvisor"},{"key":"e_1_3_2_1_13_1","unstructured":"2019. Hyper Containers. https:\/\/hypercontainer.io"},{"key":"e_1_3_2_1_14_1","unstructured":"2019. Hyper-V Containers. https:\/\/docs.microsoft.com\/ en-us\/virtualization\/windowscontainers\/manage-containers\/ hyperv-container"},{"key":"e_1_3_2_1_15_1","unstructured":"2019. Intel Clear Containers. https:\/\/clearlinux.org\/containers"},{"key":"e_1_3_2_1_16_1","unstructured":"2019. Kata Containers. https:\/\/katacontainers.io"},{"key":"e_1_3_2_1_17_1","unstructured":"2019. Kubernetes Frakti. https:\/\/github.com\/kubernetes\/frakti"},{"key":"e_1_3_2_1_18_1","unstructured":"2019. Linux LXC. https:\/\/linuxcontainers.org\/"},{"key":"e_1_3_2_1_19_1","unstructured":"2019. List of Security Vulnerabilities in the Linux Kernel. https: \/\/www.cvedetails.com\/vulnerability-list\/vendor_id-33\/product_ id-47\/cvssscoremin-7\/cvssscoremax-7.99\/Linux-Linux-Kernel.html"},{"key":"e_1_3_2_1_20_1","unstructured":"2019. OpenVZ Containers. https:\/\/openvz.org\/Main_Page"},{"key":"e_1_3_2_1_21_1","unstructured":"2019. Pods in Kubernetes. https:\/\/kubernetes.io\/docs\/concepts\/ workloads\/pods\/pod\/"},{"key":"e_1_3_2_1_22_1","unstructured":"2019. Rumprun Unikernel. https:\/\/github.com\/rumpkernel\/rumprun"},{"key":"e_1_3_2_1_23_1","unstructured":"2019. runV: Hypervisor-based Runtime for OCI. https:\/\/github.com\/ hyperhq\/runv"},{"key":"e_1_3_2_1_24_1","unstructured":"2019. User Mode Linux FAQ. http:\/\/uml.devloop.org.uk\/faq.html"},{"key":"e_1_3_2_1_25_1","unstructured":"2019. vSphere Integrated Containers. https:\/\/www.vmware.com\/ products\/vsphere\/integrated-containers.html"},{"key":"e_1_3_2_1_26_1","unstructured":"2019. What is the difference between an \"aggregate\" and other kinds of \"modified versions\"? https:\/\/www.gnu.org\/licenses\/gpl-faq.en.html# MereAggregation"},{"key":"e_1_3_2_1_27_1","volume-title":"Mach: A new kernel foundation for UNIX development.","author":"Accetta Mike","year":"1986","unstructured":"Mike Accetta, Robert Baron, William Bolosky, David Golub, Richard Rashid, Avadis Tevanian, and Michael Young. 1986. Mach: A new kernel foundation for UNIX development. (1986)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","unstructured":"T. E. Anderson. 1992. The case for application-specific operating systems. In {1992} Proceedings Third Workshop on Workstation Operating Systems. 92--94.","DOI":"10.1109\/WWOS.1992.275682"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/3026877.3026930"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2016.64"},{"key":"e_1_3_2_1_31_1","volume-title":"Advances in Service-Oriented and Cloud Computing","author":"Balalaie Armin","unstructured":"Armin Balalaie, Abbas Heydarnoori, and Pooyan Jamshidi. 2016. Migrating to Cloud-Native Architectures Using Microservices: An Experience Report. In Advances in Service-Oriented and Cloud Computing. Springer International Publishing, Cham, 201--215."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945462"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.5555\/2810087"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685070"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/2387880.2387913"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685053"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224077"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2806777.2809955"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.5555\/3027041.3027059"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.5555\/1267638.1267652"},{"key":"e_1_3_2_1_41_1","unstructured":"DATADOG. 2018. 8 Surprising Facts About Real Docker Adoption. https:\/\/www.datadoghq.com\/docker-adoption\/"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.5555\/1268379.1268386"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224076"},{"key":"e_1_3_2_1_44_1","unstructured":"Nick Gauthier. 2017. Kernel Load-Balancing for Docker Containers Using IPVS. https:\/\/blog.codeship.com\/ kernel-load-balancing-for-docker-containers-using-ipvs\/"},{"key":"e_1_3_2_1_45_1","volume-title":"Usermode Kernel: running the kernel in userspace in VM environments. Master's thesis","author":"George Sharath","unstructured":"Sharath George. 2008. Usermode Kernel: running the kernel in userspace in VM environments. Master's thesis. University of British Columbia."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.5555\/2362793.2362833"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/268998.266660"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.5555\/1688933.1689025"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1272996.1273032"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1243418.1243424"},{"key":"e_1_3_2_1_51_1","volume-title":"Principles of Container-Based Application Design. Redhat Consulting Whitepaper","author":"Ibryam Bilgin","year":"2017","unstructured":"Bilgin Ibryam. 2017. Principles of Container-Based Application Design. Redhat Consulting Whitepaper (2017). https:\/\/www.redhat.com\/en\/ resources\/cloud-native-container-design-whitepaper"},{"key":"e_1_3_2_1_52_1","unstructured":"Sandra K Johnson Gerrit Huizenga and Badari Pulavarty. 2005. Performance Tuning for Linux Servers. IBM."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.5555\/2643634.2643642"},{"key":"e_1_3_2_1_54_1","volume-title":"2015 IEEE International Conference on Communications (ICC). 6175--6180","author":"Krishnamurthy R.","unstructured":"R. Krishnamurthy and G. N. Rouskas. 2015. On the impact of scheduler settings on the performance of multi-threaded SIP servers. In 2015 IEEE International Conference on Communications (ICC). 6175--6180."},{"key":"e_1_3_2_1_55_1","unstructured":"Nicolas Lacasse. 2018. Open-sourcing gVisor a sandboxed container runtime. https:\/\/cloudplatform.googleblog.com\/2018\/05\/ Open-sourcing-gVisor-a-sandboxed-container-runtime.html"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/49.536480"},{"key":"e_1_3_2_1_57_1","volume-title":"ArXiv e-prints (Jan","author":"Lipp Moritz","year":"2018","unstructured":"Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher,Werner Haas, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, and Mike Hamburg. 2018. Meltdown. ArXiv e-prints (Jan. 2018). arXiv:1801.01207"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451167"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","unstructured":"Toshiyuki Maeda. 2003. Kernel Mode Linux. https:\/\/www.linuxjournal. com\/article\/6516","DOI":"10.5555\/770650.770651"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.5555\/2616448.2616491"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.5555\/2904388"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519068"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950399"},{"key":"e_1_3_2_1_65_1","volume-title":"9th RoEduNet IEEE International Conference. 328--333","author":"Purdila O.","unstructured":"O. Purdila, L. A. Grijincu, and N. Tapus. 2010. LKL: The Linux kernel library. In 9th RoEduNet IEEE International Conference. 328--333."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.5555\/3026877.3026929"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/1272996.1273025"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945466"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592812"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/168619.168635"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/2168836.2168849"}],"event":{"name":"ASPLOS '19: Architectural Support for Programming Languages and Operating Systems","location":"Providence RI USA","acronym":"ASPLOS '19","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages","SIGOPS ACM Special Interest Group on Operating Systems","SIGARCH ACM Special Interest Group on Computer Architecture","SIGBED ACM Special Interest Group on Embedded Systems"]},"container-title":["Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3297858.3304016","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3297858.3304016","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3297858.3304016","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:53:14Z","timestamp":1750204394000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3297858.3304016"}},"subtitle":["Breaking Down Barriers to Improve Performance and Isolation of Cloud-Native Containers"],"short-title":[],"issued":{"date-parts":[[2019,4,4]]},"references-count":71,"alternative-id":["10.1145\/3297858.3304016","10.1145\/3297858"],"URL":"https:\/\/doi.org\/10.1145\/3297858.3304016","relation":{},"subject":[],"published":{"date-parts":[[2019,4,4]]},"assertion":[{"value":"2019-04-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}