Recent device hardware trends enable a new approach to the design of network server operating systems. In a traditional operating system, the kernel mediates access to device hardware by server applications to enforce process isolation as well as network and disk security. We have designed and implemented a new operating system, Arrakis, that splits the traditional role of the kernel in two. Applications have direct access to virtualized I/O devices, allowing most I/O operations to skip the kernel entirely, while the kernel is re-engineered to provide network and disk protection without kernel mediation of every operation. We describe the hardware and software changes needed to take advantage of this new abstraction, and we illustrate its power by showing improvements of 2 to 5 × in latency and 9 × throughput for a popular persistent NoSQL store relative to a well-tuned Linux implementation.

中文翻译：

---

阿拉基斯

最近的设备硬件趋势为网络服务器操作系统的设计提供了一种新方法。在传统操作系统中，内核调解服务器应用程序对设备硬件的访问，以强制执行进程隔离以及网络和磁盘安全。我们设计并实现了一个新的操作系统 Arrakis，它将内核的传统角色一分为二。应用程序可以直接访问虚拟化 I/O 设备，允许大多数 I/O 操作完全跳过内核，同时重新设计内核以提供网络和磁盘保护，而无需内核调解每个操作。我们描述了利用这种新抽象所需的硬件和软件更改，