Secure Inter-VM Shared Memory via View Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network function virtualization in data centers faces overhead limitations due to isolation boundaries of virtual machines, particularly in inter-virtual-machine communication of small data packets, which affects throughput and scalability.
Innovation Solution
A computing device with a processor supporting virtual machine extensions, extended page table support, and fast view switch capabilities allows secure inter-virtual-machine shared memory communication by authenticating view switch components and switching to a secure view without virtual machine exits, enabling direct access to shared memory without invoking the virtual machine monitor for each access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtual machine isolation boundaries are enforced for security, then system security is improved, but inter-virtual-machine communication overhead increases
Solution Approach 1:
The patent introduces a shared memory segment as an intermediary communication channel between virtual machines. This shared memory acts as a mediator that allows VMs to exchange data without direct memory access, maintaining isolation boundaries while enabling efficient communication. The shared memory segment is managed by the virtual machine monitor but accessed through controlled mechanisms that preserve security while improving throughput.
Solution Approach 2:
The patent extracts the communication overhead from the virtual machine isolation mechanism by separating the communication path from the standard VM entry/exit flow. By using shared memory segments with direct access capabilities, the communication function is extracted from the overhead-prone virtualization layer, allowing high-speed data exchange while maintaining security boundaries through the VMM-managed shared memory interface.
2Reliability
If virtual machine monitor is invoked for each memory access, then memory access security is ensured, but processing overhead increases
Solution Approach 1:
The patent applies preliminary action by having the virtual machine monitor set up and authenticate the shared memory segment and view switch component in advance, before actual data communication occurs. This preliminary configuration includes establishing the secure view, authenticating access permissions, and preparing the shared memory structure. Once set up, multiple data accesses can proceed without repeated VMM invocations, eliminating continuous context switches while maintaining security through the pre-established authenticated access paths.
3Adaptability or versatility
If extended page table switching is performed frequently, then memory view flexibility is improved, but EPT invalidation overhead increases
Solution Approach 1:
The patent implements dynamic memory view switching through the secure view mechanism that allows the target virtual machine to switch between default and secure views without full EPT invalidation. The secure view is dynamically activated only when needed for shared memory access, and the system can switch between views based on the access type. This dynamic approach maintains memory view flexibility while reducing the overhead of frequent EPT invalidations by using targeted view switching instead of complete table revalidation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Technologies for secure inter-virtual-machine shared memory communication include a computing device with hardware virtualization support. A virtual machine monitor (VMM) authenticates a view switch component of a target virtual machine. The VMM adds configures a secure memory view to access a shared memory segment. The shared memory segment may include memory pages of a source virtual machine or the VMM. The view switch component switches to the secure memory view without generating a virtual machine exit event, using the hardware virtualization support. The view switch component may switch to the secure memory view by modifying an extended page table (EPT) pointer. The target virtual machine accesses the shared memory segment via the secure memory view. The target virtual machine and the source virtual machine may coordinate ownership of memory pages using a secure view control structure stored in the shared memory segment. Other embodiments are described and claimed.