CloudLinux launched QEMUCare Live Patching Service for Linux systems running as virtualization hosts through QEMU, the open-source emulator and hardware virtualization platform. This service is a part of CloudLinux’s TuxCare security services.
Patching without requiring server or virtualization layer
Current industry best practices require live migration of the virtual machines to other systems while the hosts are updated. QEMUCare differs from current industry best practices by removing the need to migrate virtual machines away from the updated systems. QEMUCare facilitates the process, which means time-saving. In addition to the time-saving benefit, this service makes bandwidth available to update the whole infrastructure. By the immediate deployment of security updates, it reduces the system exposure time to security vulnerabilities.
Jim Jackson, president, and chief revenue officer of CloudLinux, said,
“Patching virtualization host systems is a challenge faced by IT security and operations teams because of the impact on performance and availability for the virtual machines running on those systems. Also, it’s very easy to disrupt a running virtual machine accidentally, and the whole process is very complex to orchestrate properly across multiple systems. At the same time, it is fairly urgent to apply security patches as soon as possible to be safe from exploits.”
As QEMUCare Live Patching has a similar mechanism to other TuxCare live patching services, virtual machines running on the updated systems will not be paused, migrated, or in any way affected by the process. CloudLinux launched the TuxCare brand, which packages KernelCare, Extended Lifecycle Support, and Linux Support services, last May.
You can apply for a free proof-of-concept here. To qualify for a free proof-of-concept, the minimum requirement is 100 Linux servers.
TuxCare services are under the CloudLinux family of enterprise support services which include live patching for critical components in the Linux stack, from the kernel to widely used shared libraries. TuxCare packages KernelCare, Extended Lifecycle Support, and current version Linux Support together and provides full-coverage protection.
Furthermore, TuxCare’s Linux Support Services deliver regular patches and updates for all components of enterprise Linux systems and 24/7 incident support, even after the systems’ End-of-Life.