Combine Cloud-Native and Embedded Applications

August 16, 2019 Brandon Lewis

Networking, Cloud, Internet of Things, IoT

Building mixed-criticality infrastructure is a challenging task—especially when considering the diverse backgrounds of enterprise and operational technology stakeholders.

Solutions such as Wind River’s Helix Virtualization Platform simplify matters by enabling functional safety code and cloud-native applications to coexist  (Figure 1).

The Helix Virtualization Platform partitions static embedded code from dynamic cloud-native code
Figure 1. The Helix Virtualization Platform partitions static embedded code from dynamic cloud-native code. (Source: Wind River)

“The Helix Virtualization Platform uses a hypervisor that was designed from the ground up to support not only embedded real-time applications, but also those needing to undergo safety certification,” said Paul Parkinson, Field Engineering Director at Wind River.

“[This] embedded virtualization platform is not only efficient and scalable, but also able to support mixed-criticality systems running on the same processor with multiple levels of safety.” Supported configurations include:

  • Static Configuration for highly regulated, deterministic applications
  • Dynamic Configuration for deployments that combine multiple uncertified workloads
  • Mixed Criticality Configuration for a combination of both static and dynamic workloads

“Static configuration is used for systems containing at least one safety-critical application. The resources are allocated at system configuration and build time, and are utilized in a predictable and deterministic manner at runtime,” Parkinson explains.

“Dynamic configuration provides an alternative approach that can be used in systems requiring greater flexibility at runtime, including the ability to change the number and configuration of applications, and the resources allocated to the applications,” he adds. “This approach can be used to dynamically change system configuration and runtime operation in response to the external environment or mode of operation.”

The Type 1 Wind River Hypervisor at the root of the Helix Virtualization Platform can be certified to standards such as DO-178C for avionics, ISO/IEC-61508 SIL 3 for functional safety, and ISO 26262 for automotive.

Meanwhile, the Helix Virtualization Platform supports virtually any operating system (OS), including Wind River VxWorks, Wind River Linux, open-source Linux, Microsoft Windows, roll-your-own OSs, unmodified guest OSs, and even bare-metal code.

As a result, embedded engineers can maintain functional safety software in a deterministic partition, while enterprise developers are able to deploy cloud-native applications in another—all on the same hardware.

Under the Hood

A solution like the Wind River Helix Virtualization Platform depends, of course, on hardware that can be virtualized. While multicore processors are common in today’s world, having a compute platform that natively supports virtualization is crucial. Otherwise, modifications to guest OSs may be required to ensure it has access to system resources, even with a hypervisor running on a multicore processor.

Various flavors of virtualization technology from Intel® assist with this abstraction, helping maximize portability while maintaining safety and security:

  • Intel® Virtualization Technology (Intel® VT-x) provides instruction set virtualization so that guest OSs can be migrated seamlessly into different virtual partitions.
  • Intel® Virtualization Technology for Directed I/O (Intel® VT-d) regulates direct memory access (DMA) requests by guest OSs. This provides access to device drivers running in a partition. It also prevents illegal or unauthorized transfers.

Another feature of Intel processors that supports virtualized edge environments is extended page tables (EPTs). These optimize how the virtual addresses of a guest OS are translated to the physical addresses of the host OS. Because this translation uses less overhead and occurs more quickly, guest OSs can access resources faster and run more efficiently.

These features are available on select Intel processors, providing a scalable deployment infrastructure for Helix Virtualization Platform users.

An IoT Edge Environment for All

At first glance, the concept of cloud-native development at the edge can be troubling to industrial engineers and enterprise developers alike. After all, the architecture, which began in the data center, probably triggers thoughts of remote desktops in the minds of embedded developers. For IT developers, applying enterprise development practices to a foreign environment like the IoT edge probably makes them squeamish.

But the ROI of mixed-criticality systems is clear, as it can drastically reduce total cost of ownership (TCO) while enabling new products and services in existing applications. And when looked at through the lens of solutions like the Wind River Helix Virtualization Platform, it also benefits both IT and OT designers:

  • Industrial engineers can retain their existing firmware and application code as is by running it in a separate, isolated virtual machine (VM). Despite the addition of enterprise functionality to the system, there is no need to rework code that has been performing well for years.
  • Enterprise engineers can likewise proceed as normal by leveraging VMs of their own. This means cloud-native application development practices can continue without worries about broader system implications.

With off-the-shelf hardware and software solutions capable of satisfying the requirements of both domains, now is the time to accelerate the evolution of your IoT edge infrastructure.

Learn more about this topic in: IoT Software Goes Cloud-Native | Download

 

About the Author

Brandon Lewis

Brandon is responsible for Embedded Computing Design’s IoT Design, Automotive Embedded Systems, Security by Design, and Industrial Embedded Systems brands, where he drives content strategy, positioning, and community engagement. He is also Embedded Computing Design’s IoT Insider columnist, and enjoys covering topics that range from development kits and tools to cyber security and technology business models. Brandon received a BA in English Literature from Arizona State University, where he graduated cum laude.

Follow on Twitter Follow on Linkedin More Content by Brandon Lewis
Previous Download
Why System Integrators Need to Evolve
Why System Integrators Need to Evolve

Next Article
Cloud-Native Development for the IoT Edge
Cloud-Native Development for the IoT Edge

IoT software is going cloud-native. What does that mean for legacy embedded code? Merging these methodologi...

×

First Name
Last Name
Your Company
Phone Number
Country/Region
Subscribe To Intel Updates
Subscribe To Alliance Partner Updates
By submitting a form on this site, you are confirming you are an adult 18 years or older and you agree to Intel and Intel® IoT Solutions Alliance members contacting you with marketing-related emails or by telephone. You may unsubscribe at any time. Intel's web sites and communications are subject to our Privacy Notice and Terms of Use.
I would like to be contacted by: - optional
Your contact request is submitted.
Error - something went wrong!
×

Stay up-to-date with the latest IoT news.

Country/Region
Subscribe To Intel Updates
Subscribe To Alliance Partner Updates
By submitting a form on this site, you are confirming you are an adult 18 years or older and you agree to Intel and Intel® IoT Solutions Alliance members contacting you with marketing-related emails or by telephone. You may unsubscribe at any time. Intel's web sites and communications are subject to our Privacy Notice and Terms of Use.
Subscribed.
Error - something went wrong!