Simplifying System Design Through Hybrid Dependability Measures By Christian M. Fuchs, Martin Langer and Carsten Trinitis

Größe: px

Ab Seite anzeigen:

Download "Simplifying System Design Through Hybrid Dependability Measures By Christian M. Fuchs, Martin Langer and Carsten Trinitis"

Adolph Brinkerhoff
vor 7 Jahren
Abrufe

1 MOVE-II Research, Christian M. Fuchs, 2015 Simplifying System Design Through Hybrid Dependability Measures By Christian M. Fuchs, Martin Langer and Carsten Trinitis 1

2 How to Achieve System Dependability Classics Proven legacy technology Specialized space-grade components Holy Grails More robust manufacturing techniques New Technologies Redundancy Supervised fail-over (Dual Modular) Voting (Triple Modular) Software Measures 2

3 How to Achieve System Dependability Classics Proven legacy technology Specialized space-grade components Holy Grails More robust manufacturing techniques New Technologies Redundancy Supervised fail-over (Dual Modular) Voting (Triple Modular) Software Measures 3

4 How to Achieve System Dependability Classics Proven legacy technology Specialized space-grade components Holy Grails More robust manufacturing techniques New Technologies Redundancy Supervised fail-over (Dual Modular) Voting (Triple Modular) Software Measures 4

5 Why not in just more REDUNDANCY? 5

6 Complexity! 6

7 How to Achieve System Dependability Classics Proven legacy technology Specialized space-grade components Holy Grails More robust manufacturing techniques New Technologies Redundancy Supervised fail-over (Dual Modular) Voting (Triple Modular) Software Measures 7

8 Dependable Data Storage on Modern Memory Foundation for advanced consistency concepts System Storage RTOS Firmware, Kernel + Userland, ApplicationCode Small footprint but consistency critical Payload Data Storage Data storage for scientific data Only lossy technology available (MLC-flash) Large & challenging throughput requirements Volatile Memory 8

9 10/21/15 Protecting Operating System Data, an Example MOVE-II CDH, Christian M. Fuchs,

10 10/21/15 Protecting Operating System Data, an Example MOVE-II CDH, Christian M. Fuchs,

11 10/21/15 Protecting Operating System Data, an Example MOVE-II CDH, Christian M. Fuchs,

12 10/21/15 Magnetoresistive RAM MOVE-II CDH, Christian M. Fuchs, 2014 Source: Fert A, George J-M, Jaffres H, Mattana R and Seneor P, Europhysics News 34(6) 227,

13 10/21/15 High-Rel Data Storage on MRAM MOVE-II CDH, Christian M. Fuchs,

14 10/21/15 Virtual & Physical Memory MOVE-II CDH, Christian M. Fuchs,

15 10/21/15 Virtual Memory Mappings MOVE-II CDH, Christian M. Fuchs,

16 10/21/15 Memory Protection MOVE-II CDH, Christian M. Fuchs,

17 FTRFS: A Fault-Tolerant RadiationRobust File System for Space Use Dynamic, variable EDAC strength Erasure coding using Reed Solomon CRC32 to enhance performance Memory protection 17

18 Dependable Data Storage on Modern Memory Foundation for advanced consistency concepts System Storage RTOS Firmware, Kernel + Userland, ApplicationCode Small footprint but consistency critical Payload Data Storage Data storage for scientific data Only lossy technology available (MLC-flash) Large & challenging throughput requirements Volatile Memory 18

19 10/21/15 NAND & NOR Flash Memory MOVE-II Research, Christian M. Fuchs, 2015 Source: Wind River Systems (L), SEGGER Microcontroller (R) 19

20 10/21/15 Single-Level Cell Flash 20 MOVE-II Research, Christian M. Fuchs, 2015

21 10/21/15 Multi-Level Cell Flash 21 MOVE-II Research, Christian M. Fuchs, 2015

22 10/21/15 Data Corruption in Multi-Level Cell Flash MOVE-II Research, Christian M. Fuchs,

23 10/21/15 Higher Order Multi-Level Cell Flash MOVE-II Research, Christian M. Fuchs,

24 10/21/15 Data Corruption in Multi-Level Cell Flash MOVE-II Research, Christian M. Fuchs,

25 Adapting Erasure Coding for modern MLC-Flash MTD-Mirror: a dependable software layer for NAND-flash Two Erasure Coding Layers Reed-Solomon to counter multi-bit errors and state-machine issues LDPC to counter single-bit errors 25

26 What's Next? 26

27 Compute Consistency: The State of Affairs 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 Legacy Technology & Coarse Structures DMR/Supervised Processors TMR Approaches with COTS Processors TMR-ed Processor Designs (LEONx-FT) Ongoing Research: NoCs, ManyCores & Grid Approaches 27

28 10/21/15 NoCs & Many Cores MOVE-II Research, Christian M. Fuchs, 2015 Source: Teich J. et al: Invasive NoCs Autonomous, Self-Optimising Communication Infrastructures for MPSoCs,, University of Erlangen,

29 FPGAs and Dependability Excellent fault-recovery protential

30 FPGAs and Dependability Excellent Fault-recovery protential: Partial reconfiguration Reconfiguration using different routing 0

31 FPGAs and Dependability Core Issues: Reliable Storage of Designs ( solved ) Compute Performance Fault Detection

32 Thanks for Listening! contact: 32

33 Software-Driven Approaches Lockstepping Multiple Independent Parallel Program Flows Static Compute Overhead Vectorized-Voting Only requires SIMD extensions Enables On-demand Voting Non-SIMD operations not protected

34 Virtualization Enabled Voting Core 0 Core 1 Core 2 Core 3

35 Virtualization Enabled Lockstepping/Voting Core 0 Core 1 Hypervisor Core 2 Core 3

36 Virtualization Enabled Lockstepping/Voting Core 0 Hypervisor Virtual Machine 1 Virtual Machine 2 Virtual Machine 3 Core 2 Core 1 Core 3

37 Virtualization Enabled Lockstepping/Voting Core 1 Virtual Machine 1 Virtual Machine 2 Core 2 Virtual Machine 3 Core 3 Core 0 Hypervisor

38 Virtualization Enabled Voting Core 0 Core 1 Core 2 Core 3

39 Virtualization Enabled Voting Core 1 Core 2 Core 0 Core 3

40 VM Cross Validation Core 1 Core 2 Core 0 Hypervisor Core 3

41 VM Cross Validation Core 1 Core 0 Hypervisor Virtual Machine 1 Core 2 Virtual Machine 2 Virtual Machine 3 Core 3

42 VM Cross Validation Core 1 Core 0 Hypervisor Virtual Machine 1 Core 2 Virtual Machine 2 Virtual Machine 3 Core 3

43 VM Cross Validation Core 1 Core 0 Hypervisor Virtual Machine 1 Core 2 Virtual Machine 2 Virtual Machine 3 Core 3

44 VLIW Based Voting 3+ Parallel Program Flows On-Demand Voting on Results OR Control Flow Dynamic Reconfiguration of Voting Setup Variants: Static VLIW Based Dynamic VLIW Based

45 10/21/15 Towards Compute Dependability MOVE-II Research, Christian M. Fuchs, 2015 Low Complexity Low Power Low Cost Testability Self Validation Voting Accessibility Trade Performance vs Consistency using dynamic VLIW Issue Queue Autonomous Reconfiguration 45

46 10/21/15 Towards Compute Dependability MOVE-II Research, Christian M. Fuchs, 2015 Low Complexity Low Power Low Cost Testability Self Validation Voting Accessibility Trade Performance vs Consistency using dynamic VLIW Issue Queue Autonomous Reconfiguration 46

47 FTRFS: A Fault-Tolerant RadiationRobust File System for Space Use Dynamic erasure coding strength EDAC using Reed Solomon CRC32 to enhance performance Memory protection 47

48 FTRFS: A Fault-Tolerant RadiationRobust File System for Space Use Inspired by EXT2 with direct addressing Fully featured POSIX-FS Dynamic read/write protection (PRAMFS) Run-time static super block EDAC using RS(255, 128, t 63) CRC32 to enhance performance 48

49 The MTD-Mirror Middleware 49

50 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 Why not RAID on NAND-Flash? 50

51 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 RAID and Data Integrity 51

52 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 RAID1 with added Forward-Error-Correction 52

53 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 The Big Picture of Flash Access D a t a A c c e s s 53

54 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 Error Correcting RAID as an Overlay? 54

55 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 Redundant Array of Independent Filesystems (RAIF) Source: Joukov et al., RAIF, 24th IEEE Conference on Mass Storage Systems and Technologies,

56 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 The Limitations of RAIF + FEC 56

57 The MTD-Mirror Middleware 57

58 The MTD-Mirror Middleware 58

59 10/21/15 MOVE-II Research, Christian M. Fuchs, 2015 A Recoverable Worst-Case Scenario 59

Application Scenario: MOVE-II Nanosatellite built at TUM 1U Modular CubeSat Bus 1U Scientific Payload 12W Average Power Budget 2W OBC Power Budget

60 Application Scenario: MOVE-II Nanosatellite built at TUM 1U Modular CubeSat Bus 1U Scientific Payload 12W Average Power Budget 2W OBC Power Budget UHF/VHF + S-Band Com On-Board Computer Application Processor 32 MB ECC-SDRAM 8MB MRAM for the OS NAND-Flash for Payload Data Size Optimized Standard OS 60

61 Why not just more REDUNDANCY? 61

62 Achieving System Dependability Through Software Measures 62

63 Achieving System Dependability Through Software Measures 63

Ähnliche Dokumente

Titelmasterformat durch Klicken bearbeiten

Titelmasterformat durch Klicken Titelmasterformat durch Klicken Die neue HDS Panama Serie Enterprise Plattform für den gehobenen Mittelstand Andreas Kustura, Silvio Weber Kramer & Crew GmbH & Co. KG Titelmasterformat