Access control module, virtual machine monitor and access control method

Abstract

The invention discloses an access control module, a virtual machine monitor and an access control method, the access control module comprises: a first IO interface used as a communication interface between IO main equipment and a computer system, wherein the IO main equipment forms an IO virtual machine by establishing an association relationship with a preset first virtual machine in the computersystem. The module also comprises a first memory management unit suitable for converting a virtual address of an access space contained in a data access request into a corresponding physical addresswhen receiving the data access request from the first IO interface, and sending the data access request containing the physical address to the physical address routing unit; and a physical address routing unit suitable for routing the data access request to the corresponding access space according to the physical address contained in the received data access request. By adopting the scheme, the load of the processor in the computer system can be reduced, and the data exchange efficiency of the IO main equipment and the computer system is improved.

Description

technical field [0001] The embodiments of this specification relate to the field of computer technology, and in particular to an access control module, a virtual machine monitor, and an access control method. Background technique [0002] In the existing input / output virtualization (IOV) technology, the input / output (IO) device can be connected to the non-transparent bridge (NTB, Non-Transparent Bridge) through the IO interface of the computer system, and then used as The IO master device is connected to the computer system. [0003] The IO master device and the computer system belong to two operating systems, and they have completely different address domains. Therefore, the non-transparent bridge performs address conversion between the address of the IO master device address domain and the address domain of the computer system. [0004] However, usually the address translation space of the non-transparent bridge is limited, resulting in that the IO master can only use par...

AI Technical Summary

Problems solved by technology

[0004] However, usually the address translation space of a non-transparent bridge is limited, resulting in that the IO master can only use part of the computer system resources

For computer resources that do not correspond to the computer address domain converted by the non-transparent bridge, the IO master device cannot be directly used, but requires the processor in the computer system to perform data relocation, which increases the load on the processor and reduces the Data Exchange Efficiency Between IO Master Device and Computer System

Images