Protection Domain Groups for RDMA Memory Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for transferring data between computer systems using queue pairs and memory windows are resource-intensive and expensive to maintain, particularly in multi-client single process applications, due to the need for large mappings and protection domains.
Innovation Solution
Implementing Remote Direct Memory Access (RDMA) protocols with queue pairs, memory windows, and protection domains to enable direct memory access between computer systems, minimizing CPU and memory bus usage, and using protection domain groups to manage access rights and prevent interference.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a unique protection domain is given to each client or process in multi-client single process applications, then memory access protection and isolation between clients is improved, but resource consumption and maintenance cost increase due to large mapping infrastructure
Solution Approach 1:
Multiple protection domains that share the same memory region are merged into a single protection domain. Instead of creating unique protection domains for each client, the system combines multiple clients' protection domains into one shared protection domain, reducing the overall number of protection domains and mapping entries required while maintaining client isolation through other mechanisms.
Solution Approach 2:
A single protection domain is designed to serve multiple clients simultaneously. The protection domain structure is made universal so that one protection domain can handle memory access control for multiple clients, eliminating the need for separate protection domains for each client and reducing the mapping infrastructure burden.
2Manufacturing precision
If large mapping infrastructure is used to associate QPs with their respective memory areas, then correct memory access association is improved, but system resources and maintenance cost increase
Solution Approach 1:
The mapping infrastructure is simplified by merging multiple client mappings into a single protection domain mapping. Instead of maintaining separate mappings for each client-QP-memory region triplet, the system uses a unified mapping approach where one protection domain handles multiple clients, reducing the overall mapping table size and complexity.
Solution Approach 2:
The complex client-specific mapping information is extracted and replaced with a simpler protection domain-based mapping. The detailed client-QP associations are removed from the mapping infrastructure, and only the essential protection domain to memory region mappings are maintained, reducing mapping infrastructure complexity.
Data Source
AI summary
The disclosed embodiments may relate to protection domain group, which may include a memory region associated with a process. The protection domain group may also include a plurality of memory windows associated with the memory region. Also included may be a plurality of protection domains, each of which may correspond to a memory window. The protection domains may allow access to the memory region via a corresponding memory window.


