REVIEW 2 major objections 4 minor 38 references
Kernel/User-level Collaborative Persistent Memory File System with Efficiency and Protection
T0 review · 2 major / 4 minor · reviewed 2026-08-14 · deepseek-v4-flash
Pith's one-line read KucoFS splits a persistent-memory file system between a user-level library and a kernel thread, claiming direct-access speed with kernel-grade write protection.
desk verdict KucoFS is a genuinely new architecture with strong Optane results, but the lock-free read proof has a missing atomicity assumption that a stress test correctly exposes. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The central mechanism is the split between the Ulib (user-space library) and the master (kernel thread), with the master enforcing write protection by toggling page-table permission bits. The load-bearing pieces are: the read-only mapping of the file-system image, copy-on-write data updates, a per-file DRAM ring-buffer range lock with version, offset, size, lease, and checksum fields, and 96-bit block-mapping items whose start, version, and end bits let readers detect in-progress writes and retry. Index offloading moves pathname resolution into user space, and batching merges multiple log entries so the master persists metadata with fewer cache flushes.
What would settle it
Construct a stress test with one writer repeatedly updating overlapping byte ranges of a single file while many readers scan the block mapping and verify that every returned version pattern corresponds to a consistent snapshot of completed writes. If any interleaving of two writers on adjacent or overlapping pages can produce a valid-looking pattern that mixes old and new data, the protocol fails. A cheaper check is an exhaustive state enumeration of small interleavings of two writers updating a three-page file, comparing each reader-observed mapping against the linearized order of writes.
Extended reading notes
Core claim
The central claim is that direct access and fine-grained write protection can coexist if the file system is split by responsibility rather than by layer. KucoFS maps the user's file-system image read-only into the application's address space, so reads and pathname resolution happen directly in user space. When a write is needed, the master temporarily makes only the target data pages writable through page-table permission bits, and flips them back to read-only after the write is recorded. Writes use copy-on-write and are coordinated in user space with a versioned range lock, while reads use a lock-free protocol that validates 96-bit block-mapping items carrying start, version, end, and pointer fields. The stated result is that this design delivers higher throughput and better multicore scalability than kernel-level file systems such as PMFS, NOVA, XFS-DAX, and Ext4-DAX, and than user-level systems such as Strata and Aerie, in the reported benchmarks.
Load-bearing premise
The load-bearing premise is that the lock-free read protocol can never be fooled by a torn or stale block mapping: whenever a reader sees one of the three valid version patterns, the data pages it points to really belong to one consistent completed write, even under any interleaving of concurrent writers.
Editorial extensions
If this is right
- If the claims hold, a file system can provide kernel-level write protection without requiring a syscall per read or write operation, closing the gap between direct-access speed and safety for persistent memory.
- The design offers a template for other persistent-memory services that need both user-level performance and protection from buggy or misbehaving applications.
- The master remains a central coordinator, but index offloading and batched logging push its throughput high enough to scale to tens of cores in the reported workloads.
- The version-stamped block-mapping read protocol suggests that per-file read-write locks can be replaced by cheap validation of metadata versions, which is useful for highly concurrent read-heavy workloads.
Reading between the lines
- The version-checking read trick could be generalized to any copy-on-write block map, not just KucoFS, and the permission-toggling master could in principle be replaced by hardware page-table support that avoids explicit TLB shootdowns.
- The per-user root-tree design, chosen for read protection, points toward a practical multi-tenant isolation model that avoids full POSIX ACLs while still isolating data between users.
- A natural testable extension is to measure how often the lock-free read retry path is actually exercised under adversarial write interleavings; the paper reports aggregate throughput but not retry frequency or correctness-verification statistics.
Signed reviews
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The manuscript presents KucoFS, a persistent-memory file system split between a user-space library (Ulib) and a kernel thread (master). Ulib maps the per-user file-system image read-only into application address space, performs direct reads and copy-on-write data updates, and coordinates concurrent writes with a user-space range lock. The master handles metadata updates, append-only logging, checkpointing, and page-table permission toggling to provide write protection. The paper claims that this architecture combines the direct-access performance of user-level file systems with the write protection of kernel-level ones, and presents scalability optimizations: index offloading, batching-based logging, range-lock writes, and lock-free reads. The evaluation on Optane DC persistent memory with FxMark, Filebench, and Redis reports large throughput advantages over NOVA, PMFS, Strata, XFS-DAX, and Ext4-DAX.
Significance. If the design is correct, KucoFS would be a valuable resolution of the user-level versus kernel-level tradeoff for NVM file systems: it demonstrates direct-access reads and writes with page-table-enforced protection, and the evaluation on real Optane DC hardware is a strength. The clean ablations in Section 6.5 (index offloading, batching, lock-free read) are useful and help isolate the contributions of each optimization. However, the correctness of the two main concurrency mechanisms is not fully established: the lock-free fast read in Section 4.4 depends on an unstated atomicity assumption for 96-bit mapping items, and the range-lock ring buffer in Section 4.3 does not specify how slot reuse is handled. These issues must be resolved before the consistency guarantees claimed in Section 3 can be accepted.
major comments (2)
- [Section 4.4 (Figure 5)] The lock-free fast read protocol is only correct if each 96-bit block mapping item is updated and observed atomically, but the paper never states or implements this. On x86-64, 12-byte loads and stores are not atomic; the mfence described for items spanning multiple cachelines orders stores but does not make the fields of one item become visible as a unit. If the master updates the pointer field and the version/flags fields with separate stores, a reader can observe item2 with a new pointer but old version/flags. For the example write to pages 2 and 3 of a four-page file, the reader can see item1=V0(start), item2=V0(no flags, new pointer), item3=V0(end), which exactly matches valid pattern (a); no reload is triggered, and the reader returns a page from the in-progress write mixed with old pages. This violates the consistency guarantee stated at the start of Section 4.4. The paper should either specify that each item is updated with an atomic 16-byte write (e.g., cmpxchg16b with padding to 128 bits), provide a proof or exhaustive state enumeration showing that the three patterns are sufficient under the actual update ordering, or change the metadata layout so items fit in one atomically accessible word.
- [Section 4.3 (Figure 4)] The range-lock ring buffer is described as having 8 slots, but lock acquisition selects a slot using version modulo ring size. With more than 8 concurrent writers, which the evaluation uses (e.g., 20 threads in Section 6.2), versions v and v+8 map to the same slot. If writer v has not yet released its slot, writer v+8 overwrites the lock item; the later release of that slot by writer v, or by the master on behalf of writer v, then applies to writer v+8's item, losing a lock or releasing it prematurely. The checksum and lease fields detect corruption but do not prevent this overwrite. Please specify how slot reuse is handled, for example by waiting until the destination slot is free before overwriting, by using tagged slots that are only reused after release, or by sizing the ring buffer according to the maximum number of concurrent writers.
minor comments (4)
- [Introduction vs. Section 2.1] The Introduction states that context-switch overhead occupies up to 34% of file-system accessing time, while Section 2.1 reports context-switch latency of up to 21% and VFS overhead of 34%; please reconcile these inconsistent numbers.
- [Section 6.1/6.2] The Aerie comparison is performed on emulated persistent memory in DRAM and the results are described only in words rather than in figures or tables. Please include the numeric results and explicitly list this as a limitation when comparing with the Optane DC results.
- [Figures 6-10] The throughput graphs show no error bars or other measures of variance; if results are stable across runs, stating this would improve confidence, and if not, error bars should be added.
- [Throughout] There are several typos and minor wording issues, including 'metdata' (Section 4.3), 'doen't' (Section 4.4), and 'orders of magnitudes' (Section 6.5); a careful proofread is needed.
Circularity Check
No significant circularity: KucoFS is an empirical systems paper whose design claims are supported by external benchmarks and clean ablations, not by fitted predictions or load-bearing self-citation.
full rationale
KucoFS is an empirical systems paper, not a derivation-based paper. The central claims are architectural: user-level direct access plus kernel-enforced write protection, scalability through index offloading and batching, and lock-free fast read. None of these claims is obtained by fitting a parameter to data and then predicting the same data; the evaluation uses external benchmarks (FxMark, Filebench, Redis) and compares against independent baseline file systems. The optimization breakdown in Section 6.5 is a proper ablation: the paper disables batching and index offloading and re-measures, which is the standard way to attribute performance, not a circular prediction. The few self-citations ([10] HINFS and [22] Ou et al.) appear only as background examples of NVM-aware file systems and do not supply the load-bearing premise of any KucoFS mechanism. The lock-free fast-read protocol in Section 4.4 is asserted with three valid patterns rather than formally proven; the concern that a torn 96-bit mapping item could mimic a valid pattern is a correctness/atomicity risk, not a circularity, because KucoFS's claimed consistency does not reduce by construction to an input of the paper. No equation or claim is shown to be equivalent to its own assumption, and no fitted quantity is renamed as a prediction. Therefore the appropriate finding is no significant circularity.
Assumptions & free parameters
assumptions (3)
- domain assumption The hardware platform (Intel Optane DC PM) and OS provide mechanisms for the kernel to modify page table permissions and flush TLBs at the granularity needed by the write protocol.
- domain assumption User-level applications link Ulib and use its interfaces; the master trusts Ulib for the correctness of pre-located metadata addresses and checksums.
- domain assumption The benchmarks (FxMark, Filebench, Redis) are representative of real NVM file system workloads.
Cite this review
Pith. "Pith review of Kernel/User-level Collaborative Persistent Memory File System with Efficiency and Protection." pith.science (2026). https://pith.science/paper/53MGGDQE
@misc{pith2026190810740,
author = {Pith},
title = {Pith review of: Kernel/User-level Collaborative Persistent Memory File System with Efficiency and Protection},
year = {2026},
howpublished = {\url{https://pith.science/paper/53MGGDQE}},
note = {Machine review of arXiv:1908.10740}
}
read the original abstract
Emerging high performance non-volatile memories recall the importance of efficient file system design. To avoid the virtual file system (VFS) and syscall overhead as in these kernel-based file systems, recent works deploy file systems directly in user level. Unfortunately, a userlevel file system can easily be corrupted by a buggy program with misused pointers, and is hard to scale on multi-core platforms which incorporates a centralized coordination service. In this paper, we propose KucoFS, a Kernel and user-level collaborative file system. It consists of two parts: a user-level library with direct-access interfaces, and a kernel thread, which performs metadata updates and enforces write protection by toggling the permission bits in the page table. Hence, KucoFS achieves both direct-access of user-level designs and fine-grained write protection of kernel-level ones. We further explore its scalability to multicores: For metadata scalability, KucoFS rebalances the pathname resolution overhead between the kernel and userspace, by adopting the index offloading technique. For data access efficiency, it coordinates the data allocation between kernel and userspace, and uses range-lock write and lock-free read to improve concurrency. Experiments on Optane DC persistent memory show that KucoFS significantly outperforms existing file systems and shows better scalability.
Figures
Figures from the paper (5 more)
Reference graph
Works this paper leans on
-
[1]
http: //www.nfsv4bat.org/Documents/nasconf/2004/ filebench.pdf
Filebench file system benchmark. "http: //www.nfsv4bat.org/Documents/nasconf/2004/ filebench.pdf", 2004
work page 2004
-
[2]
https://lwn.net/ Articles/588218
Support ext4 on NV-DIMMs. " https://lwn.net/ Articles/588218", 2014
work page 2014
- [3]
-
[4]
Intel optane dc persistent memory. "https://www.intel.com/content/www/ us/en/architecture-and-technology/ optane-dc-persistent-memory.html" , 2019
work page 2019
-
[5]
IG Baek, MS Lee, S Seo, MJ Lee, DH Seo, D-S Suh, JC Park, SO Park, HS Kim, IK Yoo, et al. Highly scalable nonvolatile resistive memory using simple binary oxide driven by asymmetric unipolar voltage pulses. In Electron Devices Meeting, 2004. IEDM Technical Digest. IEEE International, pages 587–590. IEEE, 2004
work page 2004
-
[6]
Dune: Safe user-level access to privileged cpu features
Adam Belay, Andrea Bittau, Ali Mashtizadeh, David Terei, David Mazières, and Christos Kozyrakis. Dune: Safe user-level access to privileged cpu features. In Proceedings of the 10th USENIX Conference on Oper- ating Systems Design and Implementation , OSDI’12, pages 335–348, Berkeley, CA, USA, 2012. USENIX Association
work page 2012
-
[7]
Ix: A protected dataplane operating system for high throughput and low latency
Adam Belay, George Prekas, Ana Klimovic, Samuel Grossman, Christos Kozyrakis, and Edouard Bugnion. Ix: A protected dataplane operating system for high throughput and low latency. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation, OSDI’14, pages 49–65, Berkeley, CA, USA, 2014. USENIX Association
work page 2014
-
[8]
Parallel data analysis directly on scientific file formats
Spyros Blanas, Kesheng Wu, Surendra Byna, Bin Dong, and Arie Shoshani. Parallel data analysis directly on scientific file formats. In Proceedings of the 2014 ACM SIGMOD international conference on Management of data, pages 385–396. ACM, 2014
work page 2014
Show all 38 references
-
[9]
Design and implementation of the second extended filesystem
Remy Card, Theodore Ts’o, and Stephen Tweedie. Design and implementation of the second extended filesystem. In Proceedings of the 1st Dutch International Symposium on Linux, pages 1–6, 1994
1994
-
[10]
Hinfs: A persistent memory file system with both buffer- ing and direct-access
Youmin Chen, Jiwu Shu, Jiaxin Ou, and Youyou Lu. Hinfs: A persistent memory file system with both buffer- ing and direct-access. ACM Trans. Storage, 14(1):4:1– 4:30, April 2018
2018
-
[11]
Caulfield, Ameen Akel, Laura M
Joel Coburn, Adrian M. Caulfield, Ameen Akel, Laura M. Grupp, Rajesh K. Gupta, Ranjit Jhala, and Steven Swanson. Nv-heaps: Making persistent objects fast and safe with next-generation, non-volatile mem- ories. In Proceedings of the Sixteenth International Conference on Architec...
2011
-
[12]
Nightingale, Christopher Frost, Engin Ipek, Benjamin Lee, Doug Burger, and Derrick Coetzee
Jeremy Condit, Edmund B. Nightingale, Christopher Frost, Engin Ipek, Benjamin Lee, Doug Burger, and Derrick Coetzee. Better i/o through byte-addressable, persistent memory. In Proceedings of the ACM SIGOPS 22Nd Symposium on Operating Systems Principles , SOSP ’09, pages 133–14...
2009
-
[13]
Dulloor, Sanjay Kumar, Anil Keshava- murthy, Philip Lantz, Dheeraj Reddy, Rajesh Sankaran, and Jeff Jackson
Subramanya R. Dulloor, Sanjay Kumar, Anil Keshava- murthy, Philip Lantz, Dheeraj Reddy, Rajesh Sankaran, and Jeff Jackson. System software for persistent mem- ory. In Proceedings of the Ninth European Conference on Computer Systems, EuroSys ’14, pages 15:1–15:15, New York, NY ...
2014
-
[14]
Practical lock-freedom
Keir Fraser. Practical lock-freedom. Technical report, University of Cambridge, Computer Laboratory, 2004
2004
-
[15]
Basic per- formance measurements of the intel optane dc persistent memory module
Joseph Izraelevitz, Jian Yang, Lu Zhang, Juno Kim, Xiao Liu, Amirsaman Memaripour, Yun Joon Soh, Zixuan Wang, Yi Xu, Subramanya R Dulloor, et al. Basic per- formance measurements of the intel optane dc persistent memory module. arXiv preprint arXiv:1903.05714 , 2019
1903 arXiv
-
[16]
Designing a true direct-access file system with devfs
Sudarsun Kannan, Andrea C Arpaci-Dusseau, Remzi H Arpaci-Dusseau, Yuangang Wang, Jun Xu, and Gopinath Palani. Designing a true direct-access file system with devfs. In 16th USENIX Conference on File and Storage Technologies, page 241, 2018
2018
-
[17]
The machine: An architecture for memory-centric computing
Kimberly Keeton. The machine: An architecture for memory-centric computing. In Workshop on Runtime and Operating Systems for Supercomputers (ROSS) , 2015
2015
-
[18]
Strata: A cross media file system
Youngjin Kwon, Henrique Fingler, Tyler Hunt, Simon Peter, Emmett Witchel, and Thomas Anderson. Strata: A cross media file system. In Proceedings of the 26th Symposium on Operating Systems Principles, SOSP ’17, pages 460–477, New York, NY , USA, 2017. ACM
2017
-
[19]
Lee, Engin Ipek, Onur Mutlu, and Doug Burger
Benjamin C. Lee, Engin Ipek, Onur Mutlu, and Doug Burger. Architecting phase change memory as a scalable dram alternative. In Proceedings of the 36th annual International Symposium on Computer Architecture (ISCA), pages 2–13, New York, NY , USA, 2009. ACM. 12
2009
-
[20]
Socksdirect: Datacenter sockets can be fast and compatible
Bojie Li, Tianyi Cui, Zibo Wang, Wei Bai, and Lintao Zhang. Socksdirect: Datacenter sockets can be fast and compatible. In Proceedings of the ACM Special Interest Group on Data Communication, SIGCOMM ’19, pages 90–103, New York, NY , USA, 2019. ACM
2019
-
[21]
Understanding manycore scalability of file systems
Changwoo Min, Sanidhya Kashyap, Steffen Maass, Woonhak Kang, and Taesoo Kim. Understanding manycore scalability of file systems. In Proceedings of the 2016 USENIX Conference on Usenix Annual Technical Conference, USENIX ATC ’16, pages 71–85, Berkeley, CA, USA, 2016. USENIX Association
2016
-
[22]
A high perfor- mance file system for non-volatile main memory
Jiaxin Ou, Jiwu Shu, and Youyou Lu. A high perfor- mance file system for non-volatile main memory. In Proceedings of the Eleventh European Conference on Computer Systems, EuroSys ’16, pages 12:1–12:16, New York, NY , USA, 2016. ACM
2016
-
[23]
Simon Peter, Jialin Li, Irene Zhang, Dan R. K. Ports, Doug Woos, Arvind Krishnamurthy, Thomas Anderson, and Timothy Roscoe. Arrakis: The operating system is the control plane. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation, OSDI’14,...
2014
-
[24]
Arpaci-Dusseau, and Remzi H
Thanumalayan Sankaranarayana Pillai, Vijay Chi- dambaram, Ramnatthan Alagappan, Samer Al-Kiswany, Andrea C. Arpaci-Dusseau, and Remzi H. Arpaci- Dusseau. All file systems are not created equal: On the complexity of crafting crash-consistent applications. In Proceedings of the 1...
2014
-
[25]
Skip lists: A probabilistic alternative to balanced trees
William Pugh. Skip lists: A probabilistic alternative to balanced trees. Commun. ACM, 33(6):668–676, June 1990
1990
-
[26]
Qureshi, Vijayalakshmi Srinivasan, and Jude A
Moinuddin K. Qureshi, Vijayalakshmi Srinivasan, and Jude A. Rivers. Scalable high performance main memory system using phase-change memory technol- ogy. In Proceedings of the 36th annual International Symposium on Computer Architecture (ISCA) , pages 24–33, New York, NY , USA,...
2009
-
[27]
Ffwd: Delegation is (much) faster than you think
Sepideh Roghanchi, Jakob Eriksson, and Nilanjana Basu. Ffwd: Delegation is (much) faster than you think. In Proceedings of the 26th Symposium on Operating Systems Principles , SOSP ’17, pages 342–358, New York, NY , USA, 2017. ACM
2017
-
[28]
Flexsc: Flexible system call scheduling with exception-less system calls
Livio Soares and Michael Stumm. Flexsc: Flexible system call scheduling with exception-less system calls. In Proceedings of the 9th USENIX Conference on Op- erating Systems Design and Implementation, OSDI’10, pages 33–46, Berkeley, CA, USA, 2010. USENIX As- sociation
2010
-
[29]
Scalability in the xfs file system
Adam Sweeney, Doug Doucette, Wei Hu, Curtis An- derson, Mike Nishimoto, and Geoff Peck. Scalability in the xfs file system. In USENIX Annual Technical Conference, volume 15, 1996
1996
-
[30]
Haris V olos, Sanketh Nalli, Sankarlingam Panneersel- vam, Venkatanathan Varadarajan, Prashant Saxena, and Michael M. Swift. Aerie: Flexible file-system interfaces to storage-class memory. InProceedings of the Ninth Eu- ropean Conference on Computer Systems, EuroSys ’14, pages ...
2014
-
[31]
Caching or not: Rethinking virtual file system for non-volatile main memory
Ying Wang, Dejun Jiang, and Jin Xiong. Caching or not: Rethinking virtual file system for non-volatile main memory. In 10th USENIX Workshop on Hot Topics in Storage and File Systems (HotStorage 18) . USENIX Association, 2018
2018
-
[32]
Xiaojian Wu and A. L. Narasimha Reddy. Scmfs: A file system for storage class memory. In Proceedings of 2011 International Conference for High Performance Computing, Networking, Storage and Analysis, SC ’11, pages 39:1–39:11, New York, NY , USA, 2011. ACM
2011
-
[33]
Nova: A log-structured file system for hybrid volatile/non-volatile main mem- ories
Jian Xu and Steven Swanson. Nova: A log-structured file system for hybrid volatile/non-volatile main mem- ories. In Proceedings of the 14th Usenix Conference on File and Storage Technologies, FAST’16, pages 323– 338, Berkeley, CA, USA, 2016. USENIX Association
2016
-
[34]
Nova-fortis: A fault-tolerant non-volatile main memory file system
Jian Xu, Lu Zhang, Amirsaman Memaripour, Akshatha Gangadharaiah, Amit Borase, Tamires Brito Da Silva, Steven Swanson, and Andy Rudoff. Nova-fortis: A fault-tolerant non-volatile main memory file system. In Proceedings of the 26th Symposium on Operating Systems Principles , SOSP...
2017
-
[35]
Application-level optimization of big data transfers through pipelining, parallelism and con- currency
Esma Yildirim, Engin Arslan, Jangyoung Kim, and Tevfik Kosar. Application-level optimization of big data transfers through pipelining, parallelism and con- currency. IEEE Transactions on Cloud Computing , 4(1):63–75, 2016
2016
-
[36]
Ziggurat: A tiered file system for non-volatile main memories and disks
Shengan Zheng, Morteza Hoseinzadeh, and Steven Swanson. Ziggurat: A tiered file system for non-volatile main memories and disks. In 17th USENIX Conference on File and Storage Technologies (FAST 19), pages 207– 219, 2019
2019
-
[37]
A file system bypassing volatile main memory: Towards a 13 single-level persistent store
Deng Zhou, Wen Pan, Tao Xie, and Wei Wang. A file system bypassing volatile main memory: Towards a 13 single-level persistent store. In Proceedings of the 15th ACM International Conference on Computing Frontiers, CF ’18, pages 97–104, New York, NY , USA, 2018. ACM
2018
-
[38]
A durable and energy efficient main memory using phase change memory technology
Ping Zhou, Bo Zhao, Jun Yang, and Youtao Zhang. A durable and energy efficient main memory using phase change memory technology. In Proceedings of the 36th annual International Symposium on Computer Architecture (ISCA), pages 14–23, New York, NY , USA,
Reviewed August 14, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.