Linaro Connect Asia 13 : Citrix - Xen on ARM plenary session

•

5 j'aime•2,331 vues

This document discusses Citrix's involvement with the Xen open source project. It notes that Citrix is a steward of the Xen.org project and has contributed significant code and resources to its development. It also outlines some of the key benefits of using Xen for virtualization, such as efficient resource utilization and workload mobility. Furthermore, it provides details on Xen's expanding support for ARM architectures, with fully functional versions for ARM v7 and v8 platforms.

Technologie

Mark Heath, VP Products XenServer, Citrix
Lars Kurth, Xen.org Community Manager, Citrix

Citrix is a cloud
computing
company that
enables mobile
workstyles

• Efficient resource utilization
• Faster provisioning
• Workload mobility
• Increased uptime
• Enhanced security

• Less Space

• Less Energy

• Reduced Cost

• Even Less Space

• Greener Datacentres

• Even Less Cost

UBS Global Investment Research,
August 7, 2012, James F. Hillier.

XenDesktop

XenApp
XenServer

NetScaler

CloudPlatform

XenClient

XenClient XT

Oracle VM

Huawei UVP

Qubes OS

Open Mirage

ErlangOnXen

• GPLv2 with DCO

• Governance similar to Linux Kernel

• Citrix is the steward of Xen.org

• 30% code developed by Citrix

• > 10M open source users

• Xen powers the largest clouds
in production

VM0 (or Dom0) VM1 VM2 VMn

Toolstack Applications Applications Applications

Dom0 Kernel Guest OS Guest OS Guest OS

Drivers back PV front

Config Scheduler MMU Timers Interrupts

I/O Memory CPUs
HW

• Make optimum use of the ARM SOC

• Supports 32 and 64 bit

• Small code base

• Avoid x86 “baggage”

ARM SOC ARM Architecture Features for Virtualization

User mode: EL0
Device Tree describes …

Kernel mode: EL1
I/O

HVC
GIC 2 stage
GT
v2 MMU Hypervisor mode: EL2

ARM SOC ARM Architecture Features for Virtualization
Dom0 Any Xen Guest VM (including Dom0)
only User mode: EL0
Device Tree describes … User Space
Kernel
PV PV
back front Kernel mode: EL1
I/O

HVC
GIC 2 stage
GT
v2 MMU Hypervisor mode: EL2
Xen Hypervisor

• One virtualization mode

• No user space run-time on data path

• No need for Device Emulation

• Xen is easy to port

Stefano Stabellini,
Linux Xen ARM Maintainer,2013

• Fully functional for ARM v7
& v8 (64bit dom0, 32bit guests)

• ARM v7: Versatile Express,
Arndale & Samsung Chromebook

• ARM v8: Fast Model

• Will be released in Xen 4.3

• Good Technology Match
• Platform First
• Creates Opportunities …
– for Citrix
– for the Xen Community
– for the Linaro Community

Linaro Connect Asia 13 : Citrix - Xen on ARM plenary session

Contenu connexe

Tendances

LinuxCon Japan 13 : 10 years of Xen and Beyond

The Linux Foundation

Xen summit amd_2010v3

The Linux Foundation

S4 xen hypervisor_20080622

Todd Deshane

The Xen Hypervisor was built for the Cloud from the outset: when Xen was designed, we anticipated a world, which today is known as cloud computing. Today, Xen powers the largest clouds in production. This talk explores success criteria, architecture, trade-offs and challenges for cloudy hypervisors. It is intended for users and developers and starts with a brief introduction to Xen and XCP, their architecture, shine some light on common challenges for KVM and Xen, such as the NUMA performance tax and securing the cloud. It will introduce the concept of domain disaggregation as an approach to increase security, robustness and scalability: all important factors for building clouds at scale. The talk will conclude with an update on Xen support in Linux, Xen for ARM servers and other exciting developments in the Xen community and their implications for building open source clouds.

Linuxcon EU : Virtualization in the Cloud featuring Xen and XCP

The Linux Foundation

Do you dream of being able to spin up ten or twenty (or a thousand) virtual machines in an instant? Discover and repair resource bottlenecks without moving a finger? Dodge the loss of an entire storage array with no-one noticing? Span across data centers with a fleet of virtual machines? This is no sales pitch; during this tutorial, we’ll demonstrate how to leverage truly FOSS tools to build a powerful, scalable cloud that easily competes with those proprietary solutions! This deep-dive into Xen, Xen Cloud Platform, and other FOSS cloud tools and concepts is intended both for those ready to wholeheartedly embrace virtualization and for those already seasoned in general virtualization practices. You’ll leave with a collection of pre-made tools that you can use right out of the box or modify to your liking. You’ll also leave with immediately useful knowledge on best practices and common pitfalls, presented by actual FOSS practitioners like you. We begin this tutorial by discussing Xen, Xen Cloud Platform (XCP), and XCP cloud concepts (pools, hosts, storage, networks, etc.). We then explore in detail the API that makes Xen so useful for building a cloud, explore provisioning of hosts and guests using PXE, and discuss templating and installing guest virtual machines. Critical to understanding potential bottlenecks, identifying tuning opportunities and planning for the future, we will discuss performance monitoring and methodologies. Next, we teach you how to make the most of your new FOSS cloud capabilities and discuss in detail high availability infrastructure for storage and networking, advanced networking capabilities like bonding/VLANs, and the cloud orchestration tools that save you time and money. All of this with a focus on XCP in enterprise environments. Tools discussed include DRBD, Pacemaker, Open vSwitch, Cloudstack, Openstack, and more. We conclude by shedding light on exciting developments: Xen 4.2 has recently been released, with just over a year of development time and nearly 3,000 changesets. We will discuss many of the new features introduced in 4.2, as well as what changes we have in store for the 4.3 release as well as other exciting developments.

Oscon 2012 : From Datacenter to the Cloud - Featuring Xen and XCP

The Linux Foundation

OWF: Xen - Open Source Hypervisor Designed for Clouds

The Linux Foundation

Rackspace has years of experience with running Xen at scale, starting with Xen and migrating to XenServer. We will share why we use Xen/XenServer along with some of the issues that we've experienced. We will touch on our experience with migrating from Xen to XenServer and the challenges there. We will share information about Rackspace Cloud Servers architecture, and touch briefly on OpenStack when doing so. We will explain how we use Xen to quickly deploy new Openstack services with what we call Nova on Nova. And finally, we will discuss what additional features and improvements are needed and why.

Scaling Xen within Rackspace Cloud Servers

The Linux Foundation

Aplura virtualization slides

The Linux Foundation

BSDcon Asia 2015: Xen on FreeBSD

The Linux Foundation

The Xen Hypervisor was built for the Cloud from the outset: when Xen was designed, we anticipated a world, which today is known as cloud computing. Today, Xen powers the largest clouds in production. This talk explores success criteria, architecture, trade-offs and challenges for cloudy hypervisors. It is intended for users and developers and starts with a brief introduction to Xen and XCP, their architecture and on common challenges for KVM and Xen. I will introduce the concept of domain disaggregation as an approach to increase security, robustness and scalability: all important factors for building clouds at scale and show how advanced security features suchas Xen Security Modules and SELinux can help secure your cloud further. The talk will conclude with exciting developments in the Xen community, such as Xen for ARM servers, a new virtualization mode for Xen, running applications without OS in a Xen guest and point out their implications for building open source clouds.

Scale11x : Virtualization with Xen and XCP

The Linux Foundation

Art of Using Xen at Scale

The Linux Foundation

Erlang on Xen: Redefining the cloud software stack

Viktor Sovietov

Xen @ Google, 2011

The Linux Foundation

CloudStack, the world's leading open-source cloud infrastructure platform, was recently donated to the Apache Foundation, and is now an incubated Apache project. Ewan Mellor, Director of Engineering in the Citrix Cloud Platforms Group will describe the CloudStack project and explain why Xen is the pre-eminent hypervisor in public clouds today. He will describe the changes coming in CloudStack in the next 12 months, and how they are going to change the way that Xen is consumed in public and private clouds next year.

Xen and Apache cloudstack

The Linux Foundation

Xen architecture q1 2008

colegio letonia

Xen 10th anniversary Status Report (at SELF 2013)

Russell Pavlicek

Xen 4.3 Roadmap

The Linux Foundation

Modern cars, as well as aircrafts, are equipped not only with more and more complex control systems, but also with increasingly advanced user interfaces and infotainment systems. The growing computational demand of these applications can now be met only with multi-core systems, which are actually supplanting single-core ones. Also, safety-critical and non-safety-critical components must be isolated from each other. In this presentation we show a double-OS system, running on a dual-core ARM platform and using the Xen hypervisor to run, in two isolated domains, (1) the automotive-grade ERIKA Enterprise OS, a small-footprint real-time OS suitable for safety-critical control tasks, and (2) a full-featured Linux OS, which is then able to support any complex user interface or multimedia service. The system also provides a basic, safe communication mechanism between the two operating systems.

LCEU14: Integrating Linux and the Real-Time ERIKA OS Through the Xen Hypervis...

The Linux Foundation

BACD July 2012 : The Xen Cloud Platform

The Linux Foundation

The Xen Hypervisor was built for the Cloud from the outset: when Xen was designed, we anticipated a world, which today is known as cloud computing. Today, 10 years after the project started, Xen powers the largest clouds in production. This talk explores success criteria, architecture, trade-offs and challenges for cloudy hypervisors. It is intended for users and developers and starts with a brief introduction to Xen and XCP, their architecture, common challenges for KVM and Xen and securing the cloud. It will introduce concepts such as the virtualization spectrum, the concept of domain disaggregation and the Xen Security Modules as techniques to increase security, robustness and scalability. All important factors for building clouds at scale. The talk will conclude with exciting developments in the Xen community, such as Xen support for ARM servers, Mirage appliances that can be run on any Xen based cloud, etc. and explore their implications for building open source clouds.

LinuxTag13: 10 years of Xen and beyond

The Linux Foundation

Tendances (20)

LinuxCon Japan 13 : 10 years of Xen and Beyond

Xen summit amd_2010v3

S4 xen hypervisor_20080622

Linuxcon EU : Virtualization in the Cloud featuring Xen and XCP

Oscon 2012 : From Datacenter to the Cloud - Featuring Xen and XCP

OWF: Xen - Open Source Hypervisor Designed for Clouds

Scaling Xen within Rackspace Cloud Servers

Aplura virtualization slides

BSDcon Asia 2015: Xen on FreeBSD

Scale11x : Virtualization with Xen and XCP

Art of Using Xen at Scale

Erlang on Xen: Redefining the cloud software stack

Xen @ Google, 2011

Xen and Apache cloudstack

Xen architecture q1 2008

Xen 10th anniversary Status Report (at SELF 2013)

Xen 4.3 Roadmap

LCEU14: Integrating Linux and the Real-Time ERIKA OS Through the Xen Hypervis...

BACD July 2012 : The Xen Cloud Platform

LinuxTag13: 10 years of Xen and beyond

Similaire à Linaro Connect Asia 13 : Citrix - Xen on ARM plenary session

LCA13: Citrix Keynote

Linaro

2011 10-19

Yaoyao Wang

Linaro connect : Introduction to Xen on ARM

The Linux Foundation

UDS 2012 Xen

George Dunlap

Xen Project Update LinuxCon Brazil

The Linux Foundation

Virtualization in the cloud

CloudStack - Open Source Cloud Computing Project

Virtualization in the Cloud @ Build a Cloud Day SFO May 2012

The Linux Foundation

LinuxCon NA 2012: Virtualization in the cloud featuring xen

The Linux Foundation

Xen has been very successful on servers, and yet there are substantial areas where Xen can evolve further. In this talk Jun will discuss a compelling area where the Xen technologies can be applied to -- Mobile virtualization. Using Android as an example, the talk will explore two types of usage models, 1) Android as a guest, 2) Android as the host, showing the benefits of using the Xen technologies.

Mobile Virtualization using the Xen Technologies

The Linux Foundation

L4 Microkernel :: Design Overview

National Cheng Kung University

Xen Community Update 2011

The Linux Foundation

This talk will discuss the challenges of client virtualization and introduce at a technical level XenClient XT, a security-oriented client virtualization product by Citrix. By describing XenClient XT architecture and features, it will be shown how the unique Xen's design and its support for modern x86 platform hardware can increase security and isolation among VMs. Disaggregation of services provided by the platform will be a key of this talk. It will also be shown how third party software components can provide services to VMs in a secure and controlled way.

Xen and Client Virtualization: the case of XenClient XT

The Linux Foundation

Xen Euro Par07

congvc

Hypervisors were once seen as purely cloud and server technologies, but have slowly seeped into the embedded space providing extra layers of security. This discussion will showcase how companies from security vendors to automotive are using open source hypervisors (particularly Xen Project) to secure embedded systems, what challenges they face and how they have overcome it. We will also explore what this might mean to IoT at large and how to get started in securing your embedded system with a hypervisor-first approach.

LCC17 - Securing Embedded Systems with the Hypervisor - Lars Kurth, Citrix

The Linux Foundation

ARM Architecture-based System Virtualization: Xen ARM open source software pr...

The Linux Foundation

Virtualization Primer for Java Developers

Richard McDougall

Mobile operating system..

Aashish Uppal

Hyper V And Scvmm Best Practis

Blauge

Secure Container solution is to enhance container security by isolating memory between Docker containers inside one VM with Intel VT-x EPT HW, which is highly effective to protect container’s memory and at the meantime defends ret2user privilege escalation attack that exploits kernel vulnerabilities (eg. CVE-2017-6074 UAF (use-after-free) vulnerability). It extends KVM interfaces which the guest OS can leverage to isolate container memory from other containers, and the interfaces rely on Intel VT-x EPT hardware extension and provide memory access protection for the container which sits in an isolated memory region. Each secure container has a dedicated EPT table rather than sharing one EPT table with guest OS, which enforces the cross-EPT memory access protection. The whole solution is user-friendly to fit in the existing cloud server infrastructure with very limited changes.

Secure Containers with EPT Isolation

LinuxCon ContainerCon CloudOpen China

Virtualization Technology Overview

OpenCity Community

Similaire à Linaro Connect Asia 13 : Citrix - Xen on ARM plenary session (20)

LCA13: Citrix Keynote

2011 10-19

Linaro connect : Introduction to Xen on ARM

UDS 2012 Xen

Xen Project Update LinuxCon Brazil

Virtualization in the cloud

Virtualization in the Cloud @ Build a Cloud Day SFO May 2012

LinuxCon NA 2012: Virtualization in the cloud featuring xen

Mobile Virtualization using the Xen Technologies

L4 Microkernel :: Design Overview

Xen Community Update 2011

Xen and Client Virtualization: the case of XenClient XT

Xen Euro Par07

LCC17 - Securing Embedded Systems with the Hypervisor - Lars Kurth, Citrix

ARM Architecture-based System Virtualization: Xen ARM open source software pr...

Virtualization Primer for Java Developers

Mobile operating system..

Hyper V And Scvmm Best Practis

Secure Containers with EPT Isolation

Virtualization Technology Overview

Plus de The Linux Foundation

Static partitioning is used to split an embedded system into multiple domains, each of them having access only to a portion of the hardware on the SoC. It is key to enable mixed-criticality scenarios, where a critical application, often based on a small RTOS, runs alongside a larger non-critical app, typically based on Linux. The two domains cannot interfere with each other. This talk will explain how to use Xen for static partitioning. It will introduce dom0-less, a new Xen feature written for the purpose. Dom0-less allows multiple VMs to start at boot time directly from the Xen hypervisor, decreasing boot times drastically. It makes it very easy to partition the system without virtualization overhead. Dom0 becomes unnecessary. This presentation will go into details on how to setup a Xen dom0-less system. It will show configuration examples and explain device assignment. The talk will discuss its implications for latency-sensitive and safety-critical environments.

ELC2019: Static Partitioning Made Simple

The Linux Foundation

TrenchBoot is a cross-community OSS integration project for hardware-rooted, late launch integrity of open and proprietary systems. It provides a general purpose, open-source DRTM kernel for measured system launch and attestation of device integrity to trust-centric access infrastructure. TrenchBoot closes the UEFI Measurement Gap and reduces the need to trust system firmware. This talk will introduce TrenchBoot architecture and a recent collaboration with Oracle to launch the Linux kernel directly with Intel TXT or AMD SVM Secure Launch. It will propose mechanisms for integrating the Xen hypervisor into a TrenchBoot system launch. DRTM-enabled capabilities for client, server and embedded platforms will be presented for consideration by the Xen community.

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

The Linux Foundation

Artem will briefly cover what has been done since the first talk on Xen in Automotive domain back in 2013, what is going on now and what is still missing for broad adaptation of Xen in vehicles. The following topics will be covered: Embedded/automotive features of Xen Collaboration with AGL and GENIVI organizations for standardization Efforts on Functional Safety compliance Artem will also go over typical automotive use scenarios for Xen which may not be the same as generic computing use of hypervisor.

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

The Linux Foundation

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

The Linux Foundation

In recent years unikernels have shown immense performance potential (e.g., boot times of only a few ms, image sizes of only hundreds of KBs).The fundamental drawback of unikernels is that they require that applications be manually ported to the underlying minimalistic OS, needing both expert work and often considerable amount of time. The Unikraft project provides a unikernel code base and build system that significantly simplifies the building of unikernels. In addition to support for a number CPU architectures, languages and frameworks, Unikraft provides debugging and tracing features that are generally sorely missing from unikernel projects. In this talk we will talk about these features, show a set of preliminary performance numbers, and provide a roadmap for the project's future.

XPDDS19 Keynote: Unikraft Weather Report

The Linux Foundation

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

The Linux Foundation

This talk will introduce Dom0-less: a new way of using Xen to build mixed-criticality solutions. Dom0-less is a Xen feature that adds a novel approach to static partitioning based on virtualization. It allows multiple domains to start at boot time directly from the Xen hypervisor, decreasing boot times dramatically. Xen userspace tools, such as xl and libvirt, become optional. Dom0-less extends the existing device tree based Xen boot protocol to cover information required by additional domains. Binaries, such as kernels and ramdisks, are loaded by the bootloader (u-boot) and advertised to Xen via new device tree bindings. The audience will learn how to use Dom0-less to partition the system. Uboot and device tree configuration details will be explained to enable the audience to get the most out of this feature. The talk will include a status update and details on future plans.

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

The Linux Foundation

As the number of contributions grow, reviewer bandwidth becomes a bottleneck; and maintainers are always asking for more help. However, ultimately maintainers must at least Ack every patch that goes in; so if you're not a maintainer, how can you contribute? Why should anyone care about your opinion? This talk will try to lay out some advice and guidelines for non-maintainers, for how they can do code review in a way which will effectively reduce the load on maintainers when they do come to review a patch.

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

The Linux Foundation

This talk is a follow-up to our Summit 2017 presentation in which we covered our plans for Intel VMFUNC and #VE, as well as related use-cases. This year, we will provide a report on what we have accomplished in Xen 4.12, and what remains to be addressed. We will also give a brief status update of VMI on AMD hardware. The session will end with some real-world numbers of the Hypervisor Introspection solution running on Citrix Hypervisor 8.0 with #VE enabled.

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. Besides technical and compliance issues (such as ISO 26262 vs IEC 611508) transitioning an existing project to become more easily safety certifiable requires significant changes to development practices within an open source project. In this session, we will lay out some challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the Xen Project has followed thus far and highlight lessons learned along the way. The talk will primarily focus on necessary process, tooling changes and community challenges that can prevent progress. We will be offering an in-depth review of how Xen Project is approaching this challenging goal and try to derive lessons for other projects and contributors.

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. The Xen Project, a secure and stable hypervisor that is used in many different markets, has been exploring the feasibility of building safety certified products on top of Xen for a year, looking at key aspects of its code base and development practices. In this session, we will lay out the motivation and challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the project has followed thus far and highlight lessons learned along the way. The talk will cover technical enablers, necessary process and tooling changes and community challenges offering an in-depth review of how Xen Project is approaching this exciting and and challenging goal.

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

The Linux Foundation

2018 saw fundamental shifts in security boundaries which were previously taken for granted. A lot of work has been done in the past 2 years, and largely in secret under embargo, but there is plenty more work to be done to strengthen the existing mitigations and to try to recover some performance without reopening security holes. This talk will look at speculative execution sidechannels, the work which has already been done to mitigate the security holes, and future work which hopes to bring some improvements.

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

The Linux Foundation

The Arm architecture provides a set of guidelines that any software should abide by when accessing the memory with MMU off and update page-tables. Failing to do so may result in getting TLB conflicts or breaking coherency. In a previous talk ("Keeping coherency on Arm"), we focused on updating safely the stage-2 (aka P2M) page-tables. This talk will focus on the boot code and Xen memory management. During this session, we will introduce some of the guidelines and when they should be used. We will also discuss how Xen boot sequence needs to be reworked to avoid breaking the guidelines.

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

The Linux Foundation

For many years the QEMU codebase has contained PV backends for Xen guests, giving them paravirtual access to storage, network, keyboard, mouse, etc. however these backends have not been configurable as QEMU devices as their implementation did not fully adhere to the QEMU Object Model (QOM). Particularly the PV storage backend not using proper QOM devices, or qdevs, meant that the QEMU block layer needed to maintain legacy code that was cluttering up the source. This was causing push-back from the maintainers who did not want to accept any patches relating to that Xen backend until it was 'qdevified'. In this talk, I'll explain the modifications I made to QEMU to achieve 'qdevification' of the PV storage backend, how compatibility with the libxl toolstack was maintained, and what the next steps in both QEMU and libxl development should be.

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

The Linux Foundation

PCI is a local computer bus for attaching hardware devices in a computer, and is the main peripheral bus on modern x86 systems. As such, having a proper way to emulate it is crucial for Xen to be able to expose both fully emulated devices or passthrough devices to guests. This talk will focus on the current status of PCI emulation in Xen, how and where it is used, what are its main limitations and future plans to improve it in order to be more robust and modular.

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

The Linux Foundation

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

The Linux Foundation

Xen is a very powerful hypervisor with a talented and diverse developers community. Despite the fact it's almost everywhere (from the Cloud to the embedded world), it can be difficult to set up and manage as a system administrator. General purpose distros have Xen packages, but that's just a start in your Xen journey: you need some tooling and knowledge to have a working and scalable platform. XCP-ng was built to overcome those issues: by bringing Xen to the masses with a fully turnkey distro with Xen as its core. It's the logical sequel to the XCP project, with a community focus from the start. We'll see how it happened, what we did, and what's next. Finally, we'll see the impact of XCP-ng on the Xen Project.

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

The Linux Foundation

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

The Linux Foundation

High level toolstacks for server and cloud virtualization are very mature with large communities using and supporting them. Client virtualization is a much more niche community with unique requirements when compared to those found in the server space. In this talk, we’ll introduce a client virtualization toolstack for Xen (redctl) that we are using in Redfield, a new open-source client virtualization distribution that builds upon the work done by the greater virtualization and Linux communities. We will present a case for maturing libxl’s Go bindings and discuss what advantages Go has to offer for high level toolstacks, including in the server space.

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

The Linux Foundation

Today Xen is scheduling guest virtual cpus on all available physical cpus independently from each other. Recent security issues on modern processors (e.g. L1TF) require to turn off hyperthreading for best security in order to avoid leaking information from one hyperthread to the other. One way to avoid having to turn off hyperthreading is to only ever schedule virtual cpus of the same guest on one physical core at the same time. This is called core scheduling. This presentation shows results from the effort to implement core scheduling in the Xen hypervisor. The basic modifications in Xen are presented and performance numbers with core scheduling active are shown.

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

The Linux Foundation

Plus de The Linux Foundation (20)