Shared Memory Region for LPAR Page Identity Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized server environments, existing technologies face challenges in efficiently sharing memory pages between logical partitions (LPARs) or virtual machines, limiting resource allocation and isolation.
Innovation Solution
A method and system that allow multiple LPARs to share physical memory pages by using a shared memory region (SMR), where a server LPAR communicates the identity of a physical page to a client LPAR through an address translation element, enabling secure and efficient memory sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If memory pages are shared between LPARs using existing technologies, then resource utilization improves, but system complexity and isolation security worsen
Solution Approach 1:
The patent introduces a hypervisor as an intermediary layer between LPARs and physical memory pages. The hypervisor manages shared memory regions (SMRs) and handles page identity translation, acting as a mediator that enables secure memory sharing without requiring direct complex interactions between LPARs. This resolves the contradiction by centralizing management complexity in the hypervisor while maintaining simple, controlled access for individual LPARs.
Solution Approach 2:
The patent segments memory sharing into distinct shared memory regions (SMRs) with unique identifiers, where each SMR can be independently managed and accessed by specific LPARs. This segmentation allows fine-grained control over which LPARs share which memory pages, reducing overall system complexity while enabling targeted resource utilization improvements.
2Productivity
If memory pages are shared between LPARs, then resource utilization improves, but isolation security worsens
Solution Approach 1:
The hypervisor acts as a security intermediary that enforces isolation policies while enabling controlled sharing. It verifies LPAR credentials, manages SMR access permissions, and translates page identities securely, ensuring that sharing operations maintain isolation security boundaries while improving resource utilization.
Solution Approach 2:
The patent applies different security and sharing characteristics to different memory regions through SMRs. Each SMR can have its own access control policies, allowing some memory pages to be shared while others remain isolated. This local differentiation enables selective resource sharing without compromising overall system isolation security.
3Productivity
If physical page identities are directly communicated between LPARs, then sharing efficiency improves, but security and control worsen
Solution Approach 1:
The hypervisor intermediates the page identity communication process by receiving get-page-ID requests from client LPARs, querying the server LPAR for the shared page identity, and then providing the translated identity to the client. This intermediary process maintains security control while enabling efficient sharing through standardized communication protocols.
Solution Approach 2:
Instead of directly exposing physical page identities, the system creates and manages copied or translated page identities through the hypervisor. The hypervisor maintains the authoritative mapping between logical page requests and physical page identities, allowing efficient sharing while preserving security through identity translation rather than direct exposure.
Data Source
AI summary
A server LPAR operating in a virtualized computer shares pages with client LPARs using a shared memory region (SMR). A virtualization function of the computer receives a get-page-ID request associated with a client LPAR to identify a physical page corresponding to a shared page included in the SMR. The virtualization function requests the server LPAR to provide an identity of the physical page. The virtualization function receives a page-ID response comprising the identity of a server LPAR logical page that corresponds to the physical page. The virtualization element determines a physical page identity and communicates the physical page identity to the client LPAR. The virtualization element receives a page ID enter request and enters an identity of the physical page into a translation element of the computer to associate a client LPAR logical page with the physical page.