Nested Virtualization Networking via Synthetic SR-IOV Data Path
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SR-IOV implementations limit the performance benefits of nested/hierarchical virtualization by assigning a single VF to an L1 hosting partition, making it unavailable to L2 child partitions, which rely on lower-performance networking interfaces.
Innovation Solution
Create a synthetic data path from a root partition to an L2GVM using a virtual switch and a filter driver, presenting the root vmNIC as NIC switch-capable, allowing the L2GVM to access SR-IOV performance benefits without modifying existing paravirtual network interfaces.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single PCIe VF is assigned to an L1 hosting partition in current SR-IOV implementations, then the L1 partition gains direct hardware access and performance benefits, but the VF becomes unavailable to L2 child partitions, forcing them to use lower-performance networking interfaces
Solution Approach 1:
The patent introduces a virtual switch as an intermediary component that sits between the root partition's vmNIC and the L2GVM. This virtual switch creates a synthetic data path that allows L2GVMs to access SR-IOV performance benefits without directly assigning the PCIe VF to the L2 partition. The virtual switch mediates the network traffic, presenting the root vmNIC as NIC switch-capable to the L2GVM while maintaining the actual hardware connection through the L1 partition.
Solution Approach 2:
The patent implements nested virtualization where an L1 child partition (hosting partition) contains L2 child partitions (L2GVMs). The L1 partition hosts its own hypervisor that creates and manages the L2GVMs. This nested structure allows the L2GVMs to inherit access to the SR-IOV capabilities through the L1 partition's connection to the root partition, enabling multi-level virtualization while maintaining hardware access performance.
2Productivity
If nested virtualization is implemented with traditional paravirtual network interfaces, then resource utilization is enhanced and testing environments are improved, but network performance is limited due to the inability of L2GVMs to access SR-IOV capabilities
Solution Approach 1:
The patent makes the virtual switch multi-functional by enabling it to handle both traditional paravirtual network traffic and SR-IOV accelerated traffic. The virtual switch can operate with unmodified guest operating systems using standard paravirtual interfaces while simultaneously providing SR-IOV performance benefits through the synthetic data path. This universality allows the same infrastructure to serve both legacy and performance-critical workloads.
Solution Approach 2:
The patent creates a synthetic copy of the network data path that mimics the behavior of direct SR-IOV access. Instead of modifying the L2GVM's network interface card to directly access hardware, the system creates a virtual representation (synthetic data path) that replicates the performance characteristics of direct hardware access while going through the virtualized infrastructure. This copying approach maintains compatibility with standard paravirtual interfaces.
3Reliability
If the root vmNIC is presented as NIC switch-capable to the virtual switch, then L2GVMs can access SR-IOV performance benefits, but this requires exposing advanced hardware capabilities through the virtualization layer
Solution Approach 1:
The patent performs preliminary configuration of the virtual switch and synthetic data path before the L2GVM attempts to access network resources. The L1 partition's hypervisor pre-establishes the virtual switch, configures the synthetic data path, and presents the root vmNIC as NIC switch-capable before the L2GVM boots or initiates network operations. This preliminary setup ensures that when the L2GVM needs network access, the SR-IOV performance path is already in place and ready.
Solution Approach 2:
The patent replaces the need for complex physical hardware reconfiguration with a software-based synthetic data path. Instead of physically connecting the L2GVM to the PCIe VF through complex hardware switching, the system uses software-driven virtual switching and synthetic networking to achieve the same effect. This substitution of mechanical hardware reconfiguration with software-based virtualization simplifies the overall system while maintaining the performance benefits.
Data Source
AI summary
A method is disclosed for managing network communication in a virtual machine hosting computer system with nested child partitions. The method involves loading a network driver in a level-one child partition and creating a virtual switch within the level-one child partition. The virtual switch establishes a synthetic data path between a synthetic network adapter offered by a root partition and a network driver in a level-two child partition. A network interface controller (NIC) switch capability is exposed to the virtual switch, and a peripheral component interconnect express (PCIe) virtual function offered by the root partition is passed from the level-one child partition to the level-two child partition, enabling the level-two child partition to take advantage of the PCIe virtual function.