将虚拟机和容器的作用从IT扩展到OT

and Containers from IT to OT EXECUTIVE SUMMARY Operational technology (OT) and embedded systems are at an inflection point as theyevolve past specialized, single-purpose hardware to obtain the business and technologyadvantages of hosting multiple workloads/applications on general-purpose servers.Mainstream companies are beginning to build on the approaches to transformation thathave proven themselves in the information technology (IT) realm, bringing those samearchitectures to OT systems. Virtualizing workloads is the technological leap that enables this transition. The keyconcept behind virtualization is to break down the tight coupling between hardwareandsoftware.This allows multiple independent workloads/applications to coexistefficiently and securely on both general purpose and solution specific servers, regardlessof their individual requirements. In many cases, existing compute infrastructure can berepurposed for workload/application consolidation, which reduces costs and facilitatesthe move from legacy to modern architectures. These changes are taking place in industries that include automotive, energy, industrial,healthcare, and transportation. The shift promises to reduce costs, increase flexibility andagility, and streamline the upgrade path from outdated hardware. Contents EXECUTIVE SUMMARY............................................................................................................................................2DECOUPLING SOFTWARE FROM THE SYSTEM BOARD....................................................................................4HYPERVISOR-BASED VIRTUAL MACHINES.........................................................................................................4Container-Based Virtualization........................................................................................................................................................4Combined Hypervisor-Based VMs and Containers........................................................................................................................5MODERNIZING SOLUTIONS WITH VMS AND CONTAINERS.............................................................................5HOW THE WIND RIVER PORTFOLIO ENABLES NEXT GENERATION OT..........................................................6Real-Time OS: VxWorks....................................................................................................................................................................6Embedded Linux Distribution: Wind River Linux.............................................................................................................................6Real-Time Virtualized Foundation: Wind River Helix Virtualization Platform................................................................................6Secure, Scalable VM and Container Platform: Wind River Titanium Control................................................................................6Simulation of Systems in Software: Wind River Simics..................................................................................................................6Optimized for Multi-Core and Multiprocessor Platforms...............................................................................................................7CONCLUSION............................................................................................................................................................7 DECOUPLING SOFTWARE FROMTHE SYSTEM BOARD •Data protection:The data within that resides in a par-ticular VM is protected against access by applications orworkloads in other virtual machines. As facilities mature, the components such as controllerboards that are entrusted with running the software for vitalcapital equipment often stay in service beyond their designlifespan. Cost is a significant hurdle to keeping controllerequipment up to date, both in terms of the replacementexpense itself and the potential interruption to operationsthat swapping out physical compute components can create. •Fault isolation:Because each VM can power up or downon its own just like a physical system, a fault or failure inone VM will not impact other VMs operating on the sameserver or system board. Because each VM runs a full operating system (OS), VMsbased on different OSes can coexist and run on the sameserver or system board at the same time. This capabilitylets otherwise incompatible workloads share hardware. Forexample, applications that require different flavors of Linux,a real-time OS (RTOS), or even Microsoft®Windows®canrun in separate VMs on the same server or system board,without conflict. On the other hand, there may be dozens ofVMs on a single physical host, and the presence of a full OSin each one introduces computing overhead and inefficiency.In fact, a single host may run many versions of the sameOS, consuming large amounts of resources. For that reason,hypervisor-only virtualization can introdu