XPDDS17: Bring up PCI Passthrough on ARM - Julien Grall, ARM

•

1 like•875 views

Device passthrough allows the user to give control of physical devices (NIC, graphic card, etc) to a virtual machine, giving it full and direct access to the device. This has several potential uses, including avoiding overhead of the device para-virtualization and being able to run unmodified guest on Xen on ARM. Whilst PCI passthrough is already something well established on Xen, ARM support will require some fundamental changes due to architectural differences. For instance, the MSI doorbell will be translated by the IOMMU. During this session, we will look at the state of PCI passthrough on x86. Then, we will describe the interactions of the components (PCI Root controller, interrupt controller and IOMMU) required for the use of PCI on an ARM system. With this background, we will round out the discussion with the proposed approach for implementing PCI passthrough on ARM.

Technology

Bring-up PCI passthrough on ARM
Julien Grall <julien.grall@arm.com>
Xen Developper Summit 2017
© ARM 2017

About me
Working on ARM virtualization for the past 4 years
With ARM since 2016
Co-maintaining Xen on ARM - with Stefano Stabellini [Aporeto]
2 © ARM 2017

PCI on ARM
Root
Complex IOMMUPCI #A
MSI write
Interrupt Controller
MSI Doorbell
DMA access
RAM
Configuration space access
CPU
4 © ARM 2017

Hostbridges
Different way to access configuration space:
ECAM
ECAM-like
custom-way
May require specific initialization
Clock
External devices
...
Root
Complex IOMMUPCI #A
MSI write
Interrupt Controller
MSI Doorbell
DMA access
RAM
Configuration space access
CPU
5 © ARM 2017

MSI controllers
MSIs can be distinguished by some
combination of
the doorbell
the payload
Sideband information accompanying the write
Root
Complex IOMMUPCI #A
MSI write
Interrupt Controller
MSI Doorbell
DMA access
RAM
Configuration space access
CPU
6 © ARM 2017

IOMMUs - The ideal world
IOMMU will protect DMA accesses
MSIs are treated the same as DMA writes
MSI doorbells must be mapped in the IOMMU
Root
Complex IOMMUPCI #A
MSI write
Interrupt Controller
MSI Doorbell
DMA access
RAM
Configuration space access
CPU
7 © ARM 2017

IOMMUs - The real world
On some platforms, set of addresses abort before
reaching the IOMMU:
MSI doorbell built into the hostbridges
Accesses identified as P2P
Root
Complex IOMMUPCI #A
MSI write
MSI Doorbell
DMA access
RAM
Configuration space access
CPU
8 © ARM 2017

Discovering the platform
Firmware tables are used to describe:
Hostbridges
Interrupt Controllers and MSI controllers
IOMMUs
I/O topology
ARM supports both ACPI and Device Tree.
9 © ARM 2017

How ARM differs from x86?
Physical memory map is not standardised
MSIs are usually treated as DMA writes
The MSI doorbell must be mapped in the IOMMU
On some platforms:
MSIs bypass the IOMMU
set of addresses abort before reaching the IOMMU
10 © ARM 2017

Xen and PCI passthrough
PCI passthrough is currently supported on x86.
Two solutions
Use of PV drivers
Use of QEMU to emulate root complex
12 © ARM 2017

PV drivers
Hypervisor
DomUDom0
PV Backend
PCI A
Configuration space access
Accessing PCI MMIO
PV Frontend
13 © ARM 2017

QEMU
Hypervisor
DomUDom0
QEMU
PCI A
Configuration space access
Accessing PCI MMIO14 © ARM 2017

Where is ARM in the PCI story?
15 © ARM 2017

The ultimate goal
Limited modification in guest
Wide range of OSes to support
Taking advantage of the firmware tables
Better integration with GIC and IOMMU
16 © ARM 2017

Where are we?
The first proposal was discussed 2 years ago.
Used the PV drivers way
Targeting a specific hardware
A new proposal was started end of last year
Focus in the architecture requirement
Try to address the goal set
17 © ARM 2017

Proposal for ARM
Hypervisor
DomUDom0
RC Emu
PCI A
Configuration space access
Accessing PCI MMIO18 © ARM 2017

Design documents
Second version of the design document was sent in May
https://goo.gl/z51W4A
19 © ARM 2017

The trademarks featured in this presentation are registered and/or unregistered trademarks of ARM limited
(or its subsidiaries) in the EU and/or elsewhere. All rights reserved. All other marks featured may be
trademarks of their respective owners.
Copyright © 2016 ARM Limited
© ARM 2017

Linaro has published VM System specification for ARM Processors, which provides a set of guidelines for both guest OS and hypervisor implementations, such that building OS images according to these guidelines guarantees that those images can also run on hypervisors compliant with this specification. One of the spec requirements is that the hypervisor must provide an emulated PL011 UART as a serial console which meets the minimum requirements in SBSA UART as defined in ARM Server Base Architecture Document. In this presentation, Bhupinder Thakur will cover the motivation behind VM System spec requirements and the work done for adding support of PL011 emulation in Xen.

XPDDS17: Xen-lite for ARM: Adapting Xen for a Samsung Exynos MicroServer with...

The Linux Foundation

This document summarizes a presentation on adapting Xen for multi-tenant virtualization on ARM-based embedded devices with FPGA acceleration. It discusses moving PV drivers and I/O handling into the hypervisor to reduce overhead. Performance tests show MicroVisor reduces boot times and I/O latency compared to stock Xen. Integrating FPGA acceleration for networking and storage aims to improve performance for network function virtualization workloads on low-power edge devices.

XPDDS17: How to Abstract Hardware Acceleration Device in Cloud Environment - ...

The Linux Foundation

Intel® QuickAssist Technology (QAT) offers acceleration for the compute-intensive workloads of cryptography and compression. It supports Single Root I/O Virtualization (SR-IOV), which allows a single physical device to be shared by multiple guests. To better support fair sharing of capacity in a multi-tenant environment, Intel supports the concept of service level agreements. The service level is expressed using the abstraction of “acceleration units”. In this talk we will explain why we chose to define such an abstraction, and why specifying the capacity using raw throughput or operation rate alone is insufficient for accelerators – in brief, because the capacity is so heavily dependent on factors such as algorithm, direction (encrypt/sign/compress vs. decrypt/verify/decompress), key size, request size, compression level, etc. We go on to describe how such SLAs can be used to ensure that guests can be guaranteed some minimum acceleration capacity, and/or limited to some maximum. Finally, we describe use cases where this might be useful, such as when offering “acceleration as a service” in a cloud or Network Functions Virtualization (NFV) environment.

XPDDS17: Keynote: Towards a Configurable and Slimmer x86 Hypervisor - Wei Liu...

The Linux Foundation

The classic PV interface has given Xen a head start in the cloud computing era. However, with the advance of hardware technology, its usage has be declining significantly. The complexity of PV ABI has been a source of security bugs and friction between Xen and other communities. This talk tries to lay out a plan to make x86 Xen configurable to support different guests types, and then move the PV ABI to a PVH container so that it is possible to support PV workload in a more secure manner.

Rootlinux17: Hypervisors on ARM - Overview and Design Choices by Julien Grall...

The Linux Foundation

Hypervisors are used in a broad range of domains ranging from Embedded systems, Automotive to big iron servers. The choice of hypervisor has a strong impact on the overall design of your project and its performance. This talk introduces the state of virtualization on ARM, and provides a description of three popular open source hypervisors: KVM, Jailhouse and Xen. Julien Grall explains respective key features, technical differences and suitability of the hypervisor for different application domains. Julien Grall is a Software Virtualisation Engineer at ARM. The talk was delivered at Root Linux Conference 2017. Learn more: http://linux.globallogic.com/materials. The video recording is available at https://www.youtube.com/watch?v=jZNXtqFJpuc

XPDDS18: The Evolution of Virtualization in the Arm Architecture - Julien Gra...

The Linux Foundation

XPDDS18: CPUFreq in Xen on ARM - Oleksandr Tyshchenko, EPAM Systems

The Linux Foundation

The motivation of hypervisor based CPUFreq is to enable the one of the main PM use-cases (Dynamic voltage and frequency scaling) in virtualized system powered by Xen hypervisor. Rationale behind this activity is that CPU virtualization is done by hypervisor and the guest OS doesn't actually know anything about physical CPUs because it is running on virtual CPUs. In this talk Oleksandr will briefly describe the possible approach of generic CPUFreq in Xen on ARM, the advantages and disadvantages of having DVFS support on ARM boards powered by Xen hypervisor and share results of his CPUFreq PoC which implies power consumption measurements with and without CPUFreq enabled on R-Car Gen3 based board as an example.

Citrix Remote Access Solution Soup

Dan Brinkmann

This document summarizes Citrix's remote access solutions, including the Citrix Secure Gateway (CSG), Citrix Access Gateway Standard (CAG), and Citrix Access Gateway Enterprise Edition (CAG-EE). It also discusses the Netscaler platform. The CSG is now end-of-life with no support for newer features. The CAG provides ICA proxy and SSL VPN capabilities on a physical or virtual appliance. The CAG-EE has additional features like endpoint analysis and load balancing. The Netscaler provides all CAG-EE functions plus load balancing of StoreFront and XenApp/XenDesktop resources. The document discusses factors in choosing between a physical or virtual appliance deployment.

As the first ARM servers and microservers hit the market, Xen on ARM is becoming more mature, stable and reaching feature parity with x86. This talk will present the current status of the project, will describe the latest improvements, the gaps that still need to be filled and the roadmap going forward. ARMv8 silicon is now available for purchase: we can measure how well Xen on ARM 64-bit is performing on real hardware and compare the performance figures with other hypervisors. The presentation will show these results, it will measure the overhead introduced by Xen on ARM and will compare it with the overhead introduced by Xen and KVM on x86. The talk will explain the reasons behind performance shortfalls and present ideas on how to address them in the future. The performance results will be used to determine when it makes sense to use Xen on ARM and what are the best use cases for it.

ELC21: VM-to-VM Communication Mechanisms for Embedded

Stefano Stabellini

Static partitioning is becoming increasingly common in embedded. A static hypervisor, such as Xen dom0less, is employed to split the hardware resources into multiple domains and run a different OS in each domain. For instance, Linux and Zephyr. Only the simplest static partitioning configurations don't involve any data exchanges between the domains. Often, communication and data exchanges between two or more environments are required to complete the data processing pipeline that implements the target application. However, the VM-to-VM communication mechanisms available in static partitioning configurations are typically more limited compared to general-purpose hypervisors. For example, PV drivers are not available to Xen dom0less domains. This presentation will discuss the need for communication in static partitioning setups and it will present the technical challenges involved in getting traditional communication methods to work, including Xen PV drivers and VirtIO. The talk will also provide simpler alternatives based on shared memory and interrupt notifications to set up domain-to-domain data streams: simpler techniques that are easily exploitable both by Linux and by tiny baremetal applications as well.

HKG18- 115 - Partitioning ARM Systems with the Jailhouse Hypervisor

Linaro

"Session ID: HKG18-115 Session Name: HKG18-115 - Partitioning ARM Systems with the Jailhouse Hypervisor Speaker: Jan Kiszka Track: Security ★ Session Summary ★ The open source hypervisor Jailhouse provides hard partitioning of multicore systems to co-locate multiple Linux or RTOS instances side by side. It aims at low complexity and minimal footprint to achieve deterministic behavior and enable certifications according to safety or security standards. In this session, we would like to look at the ARM-specific status of Jailhouse and discuss applications, to-dos and possible collaborations around it with the ARM community. The session is intended to be half presentation, half Q&A / discussion. --------------------------------------------------- ★ Resources ★ Event Page: http://connect.linaro.org/resource/hkg18/hkg18-115/ Presentation: http://connect.linaro.org.s3.amazonaws.com/hkg18/presentations/hkg18-115.pdf Video: http://connect.linaro.org.s3.amazonaws.com/hkg18/videos/hkg18-115.mp4 --------------------------------------------------- ★ Event Details ★ Linaro Connect Hong Kong 2018 (HKG18) 19-23 March 2018 Regal Airport Hotel Hong Kong --------------------------------------------------- Keyword: Security 'http://www.linaro.org' 'http://connect.linaro.org' --------------------------------------------------- Follow us on Social Media https://www.facebook.com/LinaroOrg https://www.youtube.com/user/linaroorg?sub_confirmation=1 https://www.linkedin.com/company/1026961"

XPDS16: Keeping coherency on ARM - Julien Grall, ARM

The Linux Foundation

The ARM architecture strongly recommends to use a break-before-make when changing translation table entries whenever certain conditions are met. Failing to do so may result in getting TLB conflicts or breaking the coherency. During this session, we will introduce break-before-make and when the code handling page tables should use it. We will also discuss the modifications required in Xen to avoid breaking the coherency.

XPDS13: Xen on ARM Update - Stefano Stabellini, Citrix

The Linux Foundation

Many significant improvements have been made to Xen and Linux for the ARM architecture since September 2012, when initial support for Xen on ARM was introduced in the kernel. The number of contributors considerably increased as the number of different companies behind them. Xen on ARM has become a true multivendor project. Today Linux 3.11 can run on Xen on ARM as a DomU or Dom0, 32-bit or 64-bit, with one or more CPUs. Xen 4.3, out since July 2013, is the first hypervisor release to support ARMv7 and ARMv8 platforms. This talk will discuss the current status of the project, the principal technical advancements achieved during the last year of development and the problems still left unsolved. It will relate the experience of porting Xen to many new ARM SoCs and working with multiple hardware vendors in the ARM ecosystem, within and outside the Linaro Enterprise working Group.

XPDS16: libvirt and Tools: What's New and What's Next - James Fehlig, SUSE

The Linux Foundation

A year has passed since the last Xen Developer Summit and it is time to announce the quiet progress made on the libvirt libxl driver and related tooling. New features include memory, cpu, block device, and network interface statistics reporting, support for pvUSB, support for migration stream V2, peer-to-peer migration, UEFI for HVM guests via OVMF, and domain capabilities reporting to name a few. There are also many noteworthy improvements such as better conversion of xl.cfg to/from libvirt domXML, allowing users to easily switch between the xl+libxl and libvirt+libxl toolstacks. The summit also provides an opportunity to discuss new proposals such as better control of domain placement on NUMA systems, exposing Xen's cpu pool feature in libvirt, supporting non-volatile memory for UEFI variables, and improved capabilities reporting. Much of libvirt's value for Xen is in the tools built upon it: virt-manager, virt-viewer, virt-install, virt-builder, kimchi, OpenStack nova, etc. These tools also deserve a quick status update as they relate to Xen. The audience is encouraged to participate, e.g. by requesting a sorely missing feature, warning of an upcoming Xen change that may affect libvirt, or simply suggesting a change that makes virtualization management life a bit easier.

How to Fail at VDI

Dan Brinkmann

VDI projects often fail due to lack of proper planning and testing. Key reasons for failure include not understanding compute and storage requirements, guessing at user needs rather than measuring them, and insufficient testing with real users and applications. Proper testing is needed to understand peak usage periods, application impacts on performance over time, and how the system performs at scale.

XPDDS18: NVDIMM Overview - George Dunlap, Citrix

The Linux Foundation

NVDIMM is a standard for allowing non-volatile memory to be exposed to as normal RAM, which can be directly mapped to guests. This simple concept has the potential to dramatically change the way software is written; but also has a number of surprising problems to solve. Furthermore, this area is plagued with incomplete specifications and confusing terminoligy. This talk will attempt to give an overview of NVDIMMs from an operating system perspective: What the terminology means, how they are discovered and partitioned, issues relating to filesystems, a brief description of the functionality available in Linux, and so on. It will then describe the various issues and design choices a Xen system has to make in order to allow Xen systems to use NVDIMMs effectively.

Drive into kvm

Udayendu Kar

XPDDS18: The Art of Virtualizing Cache Maintenance - Julien Grall, Arm

The Linux Foundation

The Arm architecture allows for a wide variety of cache configurations, levels and features. This enables building systems that will optimally fit power/area budgets set for the target application. A consequence of this is that architecturally compliant software has to cater for a much wider range of behaviors than on other architectures. While most software uses cache instructions that don't need special treatment in a virtualized environment, some will want to directly manage a given cache using set/way instructions and will introduce challenges for the hypervisor to handle them. This talk will give an overview of how caches behave in the Arm architecture, especially in the context of virtualization. It will then describe the problem of using set/way instructions in a virtualized environment. We will also discuss the modifications required in Xen to handle those instructions.

XPDDS18: Memory Overcommitment in XEN - Huang Zhichao, Huawei

The Linux Foundation

This talk will introduce our practice on Memory Overcommitment in XEN, and share some findings and lessons. i.e.: The best practice of POD(Populate On Demand), including live migration of the POD pages; Introduce the mem-shr, a memory-saving de-duplication feature, to merge the samepages; Xenpaging optimizing, including some policy enhancements; Scalability investigation and enhancements on Memory Overcommitment; What fields Memory Overcommitment benefits Huawei Cloud, and some performance data

XPDS13: Enabling Fast, Dynamic Network Processing with ClickOS - Joao Martins...

The Linux Foundation

While virtualization technologies like Xen have been around for a long time, it is only in recent years that they have started to be targeted as viable systems for implementing middlebox processing (e.g., firewalls, NATs). But can they provide this functionality while yielding the high performance expected from hardware-based middlebox offerings? In this talk Joao Martins will introduce ClickOS, a tiny, MiniOS-based virtual machine tailored for network processing. In addition to the vm itself, Joao Martins will describe performance improvements done to the entire Xen I/O pipe. Finally, Joao Martins will discuss an evaluation showing that ClickOS can be instantiated in 30 msecs, can process traffic at 10Gb/s for almost all packet sizes, introduces delay of 40 microseconds and can run middleboxes at rates of 5 Mp/s.

XPDDS18: Unikraft: An easy way of crafting Unikernels on Arm - Kaly Xin, ARM

The Linux Foundation

Unikraft makes it easier to convert applications into unikernels by allowing them to reuse existing libraries and be compiled for multiple platforms automatically. It provides a library pool and build toolchain that allows developers to create unikernels by adding three basic files. Support for Arm64 is being worked on, including boot code, device drivers, and virtual devices. However, Unikraft is still new and needs to improve library compatibility, support more platforms and hypervisors, and add features like profiling.

XPDS16: AMD's virtualization memory encryption technology - Brijesh Singh, A...

The Linux Foundation

AMD presented on their memory encryption technologies for virtualized environments. Their hardware-based AMD Secure Memory Encryption and AMD Secure Encrypted Virtualization features provide encryption of memory to enhance security and isolation between VMs and the hypervisor. The encryption is performed inline by the memory controller with minimal performance impact. Key management is handled by the AMD Secure Processor to isolate encryption keys. Integration with Xen would involve calling APIs to manage keys and ASIDs for guests to provide encryption using these technologies.

LCNA14: Why Use Xen for Large Scale Enterprise Deployments? - Konrad Rzeszute...

The Linux Foundation

For many years, the Xen community has been delivering a solid virtualization platform for the enterprise. In support of the Xen community innovation effort, Oracle has been translating our enterprise experience with mission-critical workloads and large-scale infrastructure deployments into upstream contributions for the Linux and Xen efforts. In this session, you'll hear from a key Oracle expert, and community member, about Oracle contributions that focus on large-scale Xen deployments, networking, PV drivers, new PVH architecture, performance enhancements, dynamic memory usage with ‘tmem', and much more. This is your chance to get an under the hood view and see why the Xen architecture is the ideal choice for the enterprise.

Xen Project for ARM Servers

Stefano Stabellini

XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...

The Linux Foundation

Terms related to security like 'disaggregation' and 'stubdom' have found their way into the standard Xen vernacular. Implementations of these architectures still require heavy lifting but examples have made their way into both the open source and commercial products. In this talk Philip presents a lesser known but complimentary method to confine QEMU processes using SELinux type enforcement. This architecture alone is interesting but Philip believes its utility extends beyond QEMU and SELinux. Future problems like inter-VM communication mechanisms hold unique challenges with regard to access control and policy semantics. Philip will argue that an approach influenced by sVirt and user-space object managers will be useful here. As always, attendees should expect tangents into abstract topics like the nature of trust and the utopic world that strong security mechanisms will bring about.

ACRN vMeet-Up EU 2021 - Introduction and Architecture Look Forward

Project ACRN

This document provides an overview of the ACRN hypervisor project including its architecture, technology evolution, and roadmap. It discusses how ACRN supports different workload types through its flexible architecture and resource management. The technology evolution section outlines how ACRN has expanded support for features like real-time workloads, safety critical systems, and orchestration. It concludes by welcoming others to engage with and help develop ACRN to meet diverse requirements.

Hyper-V for dummies for VMware smarties

Solv AS

RDMA on ARM

inside-BigData.com

"Applications, programming languages, and libraries that leverage sophisticated network hardware capabilities have a natural advantage when used in today’s and tomorrow’s high-performance and data center computer environments. Modern RDMA based network interconnects provides incredibly rich functionality (RDMA, Atomics, OS-bypass, etc.) that enable low-latency and high-bandwidth communication services. The functionality is supported by a variety of interconnect technologies such as InfiniBand, RoCE, iWARP, Intel OPA, Cray’s Aries/Gemini, and others. OFA organization and LinuxRDMA community have been playing a predominant role in the enablement efficient and vendor agnostic software stack for those interconnects. Over the last decade, the community has developed variety user/kernel level protocols and libraries that enable a variety of applications over RDMA including MPI, SHMEM, NFS over RDMA, IPoIB, and many others." "With the emerging availability server platforms based on ARM CPU architecture, it is important to understand ARM integrates with RDMA hardware and software eco-system. In this talk, we will overview ARM architecture and system software stack. We will discuss how ARM CPU interacts with network devices and accelerators. In addition, we will share our experience in enabling RDMA software stack (OFED/MOFED Verbs) and one-sided communication libraries (Open UCX, OpenSHMEM/SHMEM) on ARM and share preliminary evaluation results." Watch the video presentation: http://wp.me/p3RLHQ-gyO Learn more: https://www.openfabrics.org/index.php/abstracts-agenda.html Sign up for our insideHPC Newsletter: http://insidehpc.com/newsletter

SOMNIUM DRT C++ tools for Microchip ARM microcontrollers

Daniel O'Hara

What's hot

Kvm简介

zhangjunli

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

The Linux Foundation

ELC21: VM-to-VM Communication Mechanisms for Embedded

Stefano Stabellini

HKG18- 115 - Partitioning ARM Systems with the Jailhouse Hypervisor

Linaro

XPDS16: Keeping coherency on ARM - Julien Grall, ARM

The Linux Foundation

XPDS13: Xen on ARM Update - Stefano Stabellini, Citrix

The Linux Foundation

XPDS16: libvirt and Tools: What's New and What's Next - James Fehlig, SUSE

The Linux Foundation

How to Fail at VDI

Dan Brinkmann

XPDDS18: NVDIMM Overview - George Dunlap, Citrix

The Linux Foundation

Drive into kvm

Udayendu Kar

XPDDS18: The Art of Virtualizing Cache Maintenance - Julien Grall, Arm

The Linux Foundation

XPDDS18: Memory Overcommitment in XEN - Huang Zhichao, Huawei

The Linux Foundation

XPDS13: Enabling Fast, Dynamic Network Processing with ClickOS - Joao Martins...

The Linux Foundation

XPDDS18: Unikraft: An easy way of crafting Unikernels on Arm - Kaly Xin, ARM

The Linux Foundation

XPDS16: AMD's virtualization memory encryption technology - Brijesh Singh, A...

The Linux Foundation

LCNA14: Why Use Xen for Large Scale Enterprise Deployments? - Konrad Rzeszute...

The Linux Foundation

Xen Project for ARM Servers

Stefano Stabellini

XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...

The Linux Foundation

ACRN vMeet-Up EU 2021 - Introduction and Architecture Look Forward

Project ACRN

Hyper-V for dummies for VMware smarties

Solv AS

What's hot (20)

Kvm简介

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

ELC21: VM-to-VM Communication Mechanisms for Embedded

HKG18- 115 - Partitioning ARM Systems with the Jailhouse Hypervisor

XPDS16: Keeping coherency on ARM - Julien Grall, ARM

XPDS13: Xen on ARM Update - Stefano Stabellini, Citrix

XPDS16: libvirt and Tools: What's New and What's Next - James Fehlig, SUSE

How to Fail at VDI

XPDDS18: NVDIMM Overview - George Dunlap, Citrix

Drive into kvm

XPDDS18: The Art of Virtualizing Cache Maintenance - Julien Grall, Arm

XPDDS18: Memory Overcommitment in XEN - Huang Zhichao, Huawei

XPDS13: Enabling Fast, Dynamic Network Processing with ClickOS - Joao Martins...

XPDDS18: Unikraft: An easy way of crafting Unikernels on Arm - Kaly Xin, ARM

XPDS16: AMD's virtualization memory encryption technology - Brijesh Singh, A...

LCNA14: Why Use Xen for Large Scale Enterprise Deployments? - Konrad Rzeszute...

Xen Project for ARM Servers

XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...

ACRN vMeet-Up EU 2021 - Introduction and Architecture Look Forward

Hyper-V for dummies for VMware smarties

Similar to XPDDS17: Bring up PCI Passthrough on ARM - Julien Grall, ARM

RDMA on ARM

inside-BigData.com

SOMNIUM DRT C++ tools for Microchip ARM microcontrollers

Daniel O'Hara

Optimizing ARM cortex a and cortex-m based heterogeneous multiprocessor syste...

Arm

The document discusses optimizing heterogeneous multiprocessor systems using ARM Cortex processors. It covers topics like system design considerations, software challenges, and ARM's activities to make heterogeneous computing easier. Specifically, it addresses issues like memory mapping, interrupt handling, communication between processors, and security models when combining Cortex-A, Cortex-R, and Cortex-M processors on a single system.

Preparing BitVisor for Supporting Multiple Architectures

Ake Koomsin

How to enable AMD IOMMU in coreboot?

Piotr Król

The idea for this talk born from fascination about the philosophy behind QubesOS, OpenXT and ViryaOS. The underlying technology for those OSes is Xen. Xen is a well-known project under the Linux Foundation umbrella, but what is most interesting in it from open source firmware perspective are high-end virtualization features like: * DMA protection * PCI pass-through * Interrupt remapping * SR-IOV * TPM and vTPM * others With automotive market hypervisors slowly move into embedded space, what means underlying firmware will have to expose right infrastructure to provide initial configuration and security. Most features have to be configured and exposed in a well-defined way by firmware. IOMMU is the system component that some of the mentioned features rely on. As maintainers of PC Engines apuX platforms, we decided to work on AMD IOMMU enabling to create right infrastructure for hypervisors and operating systems. In this presentation we want to: * explain features of AMD IOMMU * present recommended methods of AMD IOMMU enabling * demonstrate current status of our work * discuss future user needs and implementation plans

Fosdem 17 - Towards a HVM-like Dom0 for Xen

The Linux Foundation

Subtitle: Reducing the OS burden while taking advantage of new hardware features Xen is a hypervisor using a microkernel design that allows running multiple concurrent operating systems on the same hardware. One of the key features of Xen is that it is OS agnostic, meaning that any OS (with proper support) can be used as a host. Xen has a long history going back to the 90s when it was designed and the early 2000s when it was released. As a consequence of this, many of the assumptions and virtualization techniques backed into it are now superseeded by new hardware features, that make virtualization more transparent from an OS point of view. This talk provides an overview on the different kind of guests supported by Xen and how these new hardware features are used in order to improve and evolve them. It also describes the design and implementation of a new guest type, called PVHv2, and how it can be used as a control domain (Dom0). Also see: https://fosdem.org/2017/schedule/event/iaas_towahvm/

Dominating Industrie 4.0 with Secure Software Licensing

team-WIBU

The future of the industry is digital and intelligent, powered by know-how expressed in software that enables collaborative robotics, Big Data and analytics, IIoT and M2M, augmented and virtual reality, and 3D printing. Collaboration between the makers of innovative solution and manufacturing companies promotes the dissemination of the Automation 4.0 culture, the understanding of its implications for competitiveness, and the implementation of successful use cases. At the core of the new infrastructure, we find Cyber Security 4.0 and Digital Business 4.0, both facilitated by CodeMeter Embedded 2.0. The brand new generation of CodeMeter Embedded provides a broad spectrum of new features: - An extremely compact footprint: the technology is modular, so it’s your choice how to combine the modules you need and build a fully customized solution for your project. - Established compatibility with embedded systems and PLCs to cover the complete gamut of intelligent devices you intend to deploy. - Wider compatibility with platforms and operating systems; if you use a mainstream system, including ARM, Intel, and PPC, we deliver the corresponding libraries to you; if you use more exotic platforms, the source code is directly available to you. - Compatibility with the complete array of Wibu-Systems’ hardware and software secure elements: CmDongles, CmActLicenses, and CmLAN (License Server in a Network). - Compatibility with CodeMeter Runtime: no need to pick different solutions for complex architectures; CodeMeter covers all options at once. - Compatibility with CodeMeter Protection Suite, because top notch encryption is the starting point of all communication. - Compatibility with CodeMeter License Central: once security is in place, you can get on with creating, distributing, and managing your embedded software licenses and start monetizing your business. Watch the webinar: https://youtu.be/-eTiIwlejtY

MIPI DevCon Bangalore 2017: Emulation of DUT Using MIPI RMMI (M-PHY Module In...

MIPI Alliance

Shared Memory Communications-Direct Memory Access (SMC-D) Overview

zOSCommserver

S104878 nvme-revolution-jburg-v1809b

Tony Pearson

Arm in HPC

inside-BigData.com

In this video from the Rice Oil & Gas Conference, Brent Gorda from ARM presents: ARM in HPC. "With the recent Astra system at Sandia Lab (#203 on the Top500) and HPE Catalyst project in the UK, Arm-based architectures are arriving in HPC environments. Several partners have announced or will soon announce new silicon and projects, each of which offers something different and compelling for our community. Brent will describe the driving factors and how these solutions are changing the landscape for HPC." Watch the video: https://wp.me/p3RLHQ-jXS Learn more: https://developer.arm.com/hpc Sign up for our insideHPC Newsletter: http://insidehpc.com/newsletter

Future of Power: PureFlex and IBM i - Erik Rex

IBM Danmark

This document provides an overview of IBM Power Systems and IBM i. It discusses the integration and benefits of IBM i such as built-in functionality, testing, ease of management and stability. It also discusses the IBM PureFlex system and its ability to optimize infrastructure through resource sensing and anticipation. Specific Power Systems servers like the p260 and p460 are highlighted and the document concludes by emphasizing IBM i and PureFlex as a higher standard for integrated and trusted business computing.

64-bit ARM Unikernels on uKVM

LinuxCon ContainerCon CloudOpen China

This document discusses unikernels and uKVM running on ARM64 architecture. It provides an introduction to unikernels and how they address issues with traditional workloads on the cloud like slow initialization and excessive resource usage. It describes how uKVM provides virtualization for unikernels and the work being done to port uKVM to ARM64. A demo shows the small footprint and fast boot time of an Nginx unikernel running on uKVM for ARM64, and how many instances can run simultaneously on a single host. Future work is outlined to improve compatibility and performance.

Arm DynamIQ: Intelligent Solutions Using Cluster Based Multiprocessing

Arm

DynamIQ is Arm's new cluster-based multiprocessing architecture that allows for heterogeneous processing. It features the DynamIQ Shared Unit that connects CPU cores and manages shared resources like caches. The new Cortex-A75 and Cortex-A55 CPU cores are the first built on DynamIQ. Cortex-A75 provides a significant performance boost while Cortex-A55 improves efficiency. Together they enable scalable solutions from edge to cloud.

Presentazione IBM Flex System e System x Evento Venaria 14 ottobre

PRAGMA PROGETTI

This document discusses IBM's sale of its x86 server business to Lenovo in 2014. It provides an overview of the transaction details, analyst reactions which were mostly positive, and commitments from both IBM and Lenovo to ensure a smooth transition and continued innovation. Key points include Lenovo paying $2.3 billion for the business, IBM continuing to provide support for 5 years, and both companies pledging commitment to customers and the server roadmap.

Upgrade to cf 2016 1

SandipHalder11

This document discusses upgrading to ColdFusion 2016. It describes the key reasons for upgrading as improved performance, security and features. It outlines the major changes between versions like the switch from JRun to Tomcat. It also covers planning the upgrade including time, money and effort required. Finally it discusses different types of migrations and tools available to assist with the migration like the migration wizard, code analyzer and CAR file mechanism.

Efficient software development with heterogeneous devices

Arm

Capi snap overview

Yutaka Kawai

Presentation power vm common 2012

solarisyougood

Microprofile at IBM with Liberty

Erin Schnabel

Similar to XPDDS17: Bring up PCI Passthrough on ARM - Julien Grall, ARM (20)

RDMA on ARM

SOMNIUM DRT C++ tools for Microchip ARM microcontrollers

Optimizing ARM cortex a and cortex-m based heterogeneous multiprocessor syste...

Preparing BitVisor for Supporting Multiple Architectures

How to enable AMD IOMMU in coreboot?

Fosdem 17 - Towards a HVM-like Dom0 for Xen

Dominating Industrie 4.0 with Secure Software Licensing

MIPI DevCon Bangalore 2017: Emulation of DUT Using MIPI RMMI (M-PHY Module In...

Shared Memory Communications-Direct Memory Access (SMC-D) Overview

S104878 nvme-revolution-jburg-v1809b

Arm in HPC

Future of Power: PureFlex and IBM i - Erik Rex

64-bit ARM Unikernels on uKVM

Arm DynamIQ: Intelligent Solutions Using Cluster Based Multiprocessing

Presentazione IBM Flex System e System x Evento Venaria 14 ottobre

Upgrade to cf 2016 1

Efficient software development with heterogeneous devices

Capi snap overview

Presentation power vm common 2012

Microprofile at IBM with Liberty

More from The Linux Foundation

ELC2019: Static Partitioning Made Simple

The Linux Foundation

Static partitioning is used to split an embedded system into multiple domains, each of them having access only to a portion of the hardware on the SoC. It is key to enable mixed-criticality scenarios, where a critical application, often based on a small RTOS, runs alongside a larger non-critical app, typically based on Linux. The two domains cannot interfere with each other. This talk will explain how to use Xen for static partitioning. It will introduce dom0-less, a new Xen feature written for the purpose. Dom0-less allows multiple VMs to start at boot time directly from the Xen hypervisor, decreasing boot times drastically. It makes it very easy to partition the system without virtualization overhead. Dom0 becomes unnecessary. This presentation will go into details on how to setup a Xen dom0-less system. It will show configuration examples and explain device assignment. The talk will discuss its implications for latency-sensitive and safety-critical environments.

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

The Linux Foundation

Daniel Smith discusses TrenchBoot, a project aiming to establish a unified approach to harnessing boot integrity technologies across open source platforms. TrenchBoot will enable establishing hardware-rooted integrity during platform boot (first launch inspection), runtime (runtime inspection), and other states. For runtime inspection, TrenchBoot will develop a way to securely re-establish the integrity of Xen at any time without rebooting by dynamically launching an integrity kernel to inspect and verify Xen. The talk outlines the initial and future work of TrenchBoot to integrate these capabilities with Linux, Xen and other open source projects.

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

The Linux Foundation

Artem will briefly cover what has been done since the first talk on Xen in Automotive domain back in 2013, what is going on now and what is still missing for broad adaptation of Xen in vehicles. The following topics will be covered: Embedded/automotive features of Xen Collaboration with AGL and GENIVI organizations for standardization Efforts on Functional Safety compliance Artem will also go over typical automotive use scenarios for Xen which may not be the same as generic computing use of hypervisor.

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

The Linux Foundation

XPDDS19 Keynote: Unikraft Weather Report

The Linux Foundation

In recent years unikernels have shown immense performance potential (e.g., boot times of only a few ms, image sizes of only hundreds of KBs).The fundamental drawback of unikernels is that they require that applications be manually ported to the underlying minimalistic OS, needing both expert work and often considerable amount of time. The Unikraft project provides a unikernel code base and build system that significantly simplifies the building of unikernels. In addition to support for a number CPU architectures, languages and frameworks, Unikraft provides debugging and tracing features that are generally sorely missing from unikernel projects. In this talk we will talk about these features, show a set of preliminary performance numbers, and provide a roadmap for the project's future.

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

The Linux Foundation

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

The Linux Foundation

This talk will introduce Dom0-less: a new way of using Xen to build mixed-criticality solutions. Dom0-less is a Xen feature that adds a novel approach to static partitioning based on virtualization. It allows multiple domains to start at boot time directly from the Xen hypervisor, decreasing boot times dramatically. Xen userspace tools, such as xl and libvirt, become optional. Dom0-less extends the existing device tree based Xen boot protocol to cover information required by additional domains. Binaries, such as kernels and ramdisks, are loaded by the bootloader (u-boot) and advertised to Xen via new device tree bindings. The audience will learn how to use Dom0-less to partition the system. Uboot and device tree configuration details will be explained to enable the audience to get the most out of this feature. The talk will include a status update and details on future plans.

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

The Linux Foundation

As the number of contributions grow, reviewer bandwidth becomes a bottleneck; and maintainers are always asking for more help. However, ultimately maintainers must at least Ack every patch that goes in; so if you're not a maintainer, how can you contribute? Why should anyone care about your opinion? This talk will try to lay out some advice and guidelines for non-maintainers, for how they can do code review in a way which will effectively reduce the load on maintainers when they do come to review a patch.

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

The Linux Foundation

This talk is a follow-up to our Summit 2017 presentation in which we covered our plans for Intel VMFUNC and #VE, as well as related use-cases. This year, we will provide a report on what we have accomplished in Xen 4.12, and what remains to be addressed. We will also give a brief status update of VMI on AMD hardware. The session will end with some real-world numbers of the Hypervisor Introspection solution running on Citrix Hypervisor 8.0 with #VE enabled.

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. Besides technical and compliance issues (such as ISO 26262 vs IEC 611508) transitioning an existing project to become more easily safety certifiable requires significant changes to development practices within an open source project. In this session, we will lay out some challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the Xen Project has followed thus far and highlight lessons learned along the way. The talk will primarily focus on necessary process, tooling changes and community challenges that can prevent progress. We will be offering an in-depth review of how Xen Project is approaching this challenging goal and try to derive lessons for other projects and contributors.

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

The Linux Foundation

This document summarizes a discussion around enabling functional safety certification for the Xen open source hypervisor project. Key points discussed include: - Establishing a split development model with open and closed parts to balance community needs and safety requirements. - Developing reference implementations and stacks supported by multiple vendors to demonstrate safety certification feasibility. - Creating plans and processes around requirements, documentation, verification testing, and tooling integration to begin filling gaps for certification. - Addressing challenges around funding, resources, expertise, and maintaining contributions to ensure any initial work is sustainable long-term. - Taking an iterative, agile approach to make early progress while further securing necessary funding and support from interested parties.

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

The Linux Foundation

2018 saw fundamental shifts in security boundaries which were previously taken for granted. A lot of work has been done in the past 2 years, and largely in secret under embargo, but there is plenty more work to be done to strengthen the existing mitigations and to try to recover some performance without reopening security holes. This talk will look at speculative execution sidechannels, the work which has already been done to mitigate the security holes, and future work which hopes to bring some improvements.

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

The Linux Foundation

The Arm architecture provides a set of guidelines that any software should abide by when accessing the memory with MMU off and update page-tables. Failing to do so may result in getting TLB conflicts or breaking coherency. In a previous talk ("Keeping coherency on Arm"), we focused on updating safely the stage-2 (aka P2M) page-tables. This talk will focus on the boot code and Xen memory management. During this session, we will introduce some of the guidelines and when they should be used. We will also discuss how Xen boot sequence needs to be reworked to avoid breaking the guidelines.

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

The Linux Foundation

For many years the QEMU codebase has contained PV backends for Xen guests, giving them paravirtual access to storage, network, keyboard, mouse, etc. however these backends have not been configurable as QEMU devices as their implementation did not fully adhere to the QEMU Object Model (QOM). Particularly the PV storage backend not using proper QOM devices, or qdevs, meant that the QEMU block layer needed to maintain legacy code that was cluttering up the source. This was causing push-back from the maintainers who did not want to accept any patches relating to that Xen backend until it was 'qdevified'. In this talk, I'll explain the modifications I made to QEMU to achieve 'qdevification' of the PV storage backend, how compatibility with the libxl toolstack was maintained, and what the next steps in both QEMU and libxl development should be.

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

The Linux Foundation

PCI is a local computer bus for attaching hardware devices in a computer, and is the main peripheral bus on modern x86 systems. As such, having a proper way to emulate it is crucial for Xen to be able to expose both fully emulated devices or passthrough devices to guests. This talk will focus on the current status of PCI emulation in Xen, how and where it is used, what are its main limitations and future plans to improve it in order to be more robust and modular.

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

The Linux Foundation

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

The Linux Foundation

Xen is a very powerful hypervisor with a talented and diverse developers community. Despite the fact it's almost everywhere (from the Cloud to the embedded world), it can be difficult to set up and manage as a system administrator. General purpose distros have Xen packages, but that's just a start in your Xen journey: you need some tooling and knowledge to have a working and scalable platform. XCP-ng was built to overcome those issues: by bringing Xen to the masses with a fully turnkey distro with Xen as its core. It's the logical sequel to the XCP project, with a community focus from the start. We'll see how it happened, what we did, and what's next. Finally, we'll see the impact of XCP-ng on the Xen Project.

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

The Linux Foundation

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

The Linux Foundation

High level toolstacks for server and cloud virtualization are very mature with large communities using and supporting them. Client virtualization is a much more niche community with unique requirements when compared to those found in the server space. In this talk, we’ll introduce a client virtualization toolstack for Xen (redctl) that we are using in Redfield, a new open-source client virtualization distribution that builds upon the work done by the greater virtualization and Linux communities. We will present a case for maturing libxl’s Go bindings and discuss what advantages Go has to offer for high level toolstacks, including in the server space.

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

The Linux Foundation

Today Xen is scheduling guest virtual cpus on all available physical cpus independently from each other. Recent security issues on modern processors (e.g. L1TF) require to turn off hyperthreading for best security in order to avoid leaking information from one hyperthread to the other. One way to avoid having to turn off hyperthreading is to only ever schedule virtual cpus of the same guest on one physical core at the same time. This is called core scheduling. This presentation shows results from the effort to implement core scheduling in the Xen hypervisor. The basic modifications in Xen are presented and performance numbers with core scheduling active are shown.

More from The Linux Foundation (20)