Lightweight nested virtualization implementation method based on physical resource penetration mechanism
A technology of nested virtualization and physical resources, applied in the field of lightweight nested virtualization based on the penetration mechanism of physical resources, can solve problems such as performance isolation of NUMA architecture, achieve performance isolation, avoid performance load, avoid The effect of performance overhead
Patent Information
- Authority / Receiving Office
- CN · China
- Current Assignee / Owner
- Publication Date
- 2014-08-20
Smart Images

Figure 1 
Figure 2 
Figure 3
Abstract
Description
technical field
[0001] The invention belongs to the technical field of nested virtualization systems, and in particular relates to a lightweight nested virtualization implementation method based on a physical resource penetration mechanism. Background technique
[0002] Nested virtualization technology is an extension of traditional virtualization technology. A host hypervisor using this technology can simultaneously run multiple guest hypervisors on a physical computer. Cloud service providers can not only provide virtualization system leasing services through nested virtualization technology, but also simplify the complexity of cloud migration. There are many security holes in the existing virtualization system. Researchers can ensure the control flow integrity of the virtualization system and prevent user privacy data leakage through nested virtualization technology. Nested virtualization technology can also make the development and debugging of virtual machines more eff...
Examples
Embodiment Construction
[0024] The present invention will be further described below in conjunction with accompanying drawing.
[0025] see Figure 1 to Figure 2 , the present invention comprises the following steps:
[0026] 1) System startup:
[0027] The host hypervisor runs in host mode of the processor, while the guest hypervisor runs in guest mode. The boot program first loads the host hypervisor to run, and the host hypervisor starts by simulating the boot program to load the guest hypervisor; the host hypervisor divides the available physical resources, and each guest hypervisor runs transparently on an independent processor, memory and PCI network card. There is no resource sharing between hypervisors;
[0028] 2) Acquisition of processor information:
[0029] Determine the NUMA topology information in the system through the SRAT-related resource affinity table provided by ACPI; probe the multi-processor table to obtain the processor information available in the machine;
[0030] 3) Acq...