Happy Earth Day! Go green and save 50% off our shared web hosting plans with code GREEN50 . Get started!

Ksplice Rebootless Kernel Technology

Ksplice Rebootless Kernel Technology

Canadian Web Hosting has implemented the Ksplice Uptrack Service on all shared Linux hosting servers.

This revolutionary technology enables kernel updates without the need of a server reboot.

This will increase the server uptime and stability of all Canadian Web Hosting shared servers.

In partnership with Ksplice, we now offer this optional service for Linux VPS servers and Linux dedicated servers.

Advantages

  • Keep your systems up to date and secure automatically via cronjob without rebooting
  • Save time by updating in seconds, while your systems are running
  • Avoid disruptive downtime
  • Prevent costly security incidents by patching in a timely manner

How Does It Work?

Ksplice updates the core of your operating system, the kernel, while it is running without requiring a reboot.

Lifecycle of an update

A dangerous bug or security hole is discovered in Linux.

Linux vendors test and release an update that corrects the problem, but requires a reboot.

We convert the update into a rebootless update for your system, using our unique Ksplice technology.

The rebootless update is securely distributed to your machines.

Your infrastructure is once again up to date and secure.

Technology

Today, every mainstream operating system requires regular reboots in order to be up to date and secure. Since reboots cause downtime and disruption, people are forced into the uncomfortable dilemma of choosing between security and convenience.

Any delay in patching software problems - even a delay of just a few days to arrange for downtime - can have serious consequences. Within just six days after the announcement of the Linux sys_prctl vulnerability, many servers had been compromised, including an important server for the Debian distribution.

Ksplice enables running systems to stay secure without the disruption of rebooting. Specifically, Ksplice creates rebootless updates that are based on traditional source code patches. These updates are as effective as traditional updates, but they can be applied seamlessly, with no downtime.

Ksplice currently supports updating the Linux kernel, but the Ksplice technology applies to any operating system or to user space applications.

The Ksplice software uses a source code patch and the source code of the running kernel in order to determine how to apply the patch to the running kernel. The running kernel does not need to have been prepared in advance in any way, which means that Ksplice can bring any system up to date, even one that was first booted many years ago.

The Ksplice software currently supports the x86-32, x86-64, and ARM architectures. Ksplice has been tested on Linux kernel versions ranging from 2.6.8 to 2.6.31, and on many Linux distributions, including Debian, Ubuntu, Red Hat Enterprise Linux, CentOS, Virtuozzo, Fedora, and Gentoo.

The full technical paper can be viewed in PDF format at http://www.canadianwebhosting.com/ksplice.pdf