SecFaaS2Fog is a declarative prototype to place orchestrated FaaS applications onto a Fog infrastructure satisfying QoS, hardware and software requirements of serverless functions and employing information-flow security techniques to prevent leaks of critical information. During the placement, SecFaaS2Fog can resolve bindings of service with functions, considering the service type and latency requirements. To avoid leaking the value of an if statement guard, SecFaaS2Fog pads the requirements of the functions of two branches to make them indistinguishable from an external attacker.
Before using FaaS2Fog you need to install the latest stable release of SWI-Prolog .
To try SecFaaS2Fog :
-
Download or clone this repository.
-
Open a terminal in the project folder and run
swipl placer.pl. -
Inside the running program either run the query
:- secfaas2fog(GeneratorId, OrchestrationId, Placement).
The output are the elegible placements for the application described in application.pl onto the infrastructure described in infrastructure.pl . Each Placement is composed by the orchestrated functions composed by function identifier, the node selected for the placement and the list of resolved bindings with services (triples of service type, service instance and node hosting the service).
E.g. of single placement
Placement= seq(seq(fp(fCrop, top, [py3, numPy], (2048, 4, 1200), [], labServer), fp(fGeo, medium, [js], (256, 2, 400), [(maps, cMaps, cloudNode)], ispRouter)), fp(fAR, low, [py3, numPy], (2048, 4, 1200), [], antenna2)).
- To have a rendering of the placement, inside swipl run the query
:- printMap(OrchestrationId, String).
The output is a Graphvizscript to be inserted in a diagraph.
- To find eligible placement without the padding of conditional branches, inside swipl run the query
:- noPad(GeneratorId, OrchestrationId, Placement).
The result is a single placement and the execution time in seconds.
- To execute the partial placement of an orchestration, inside swipl run the query
:- replacement(MaxExecTime, StartingFunction, StartingNodes, OrchestrationId, Placement).
The output is the placement of the orchestration starting from a specific function, ignoring all the previous functions.
- To execute the optimised placement of an orchestration, inside swipl run the query
:- secfaas2fogOpt(MaxExecTime, GeneratorId, OrchestrationId, Placement).
The output is a single placement of the orchestration (if exists) or false in case of the execution time in seconds exceeds MaxExecTime.