Citation Context

...g network I/O devices is relatively expensive. Previously published papers evaluating Xen’s performance have used networking benchmarks in systems with limited network bandwidth and high CPU capacity =-=[4, 10]-=-. Since this results in the network, rather than the CPU, becoming the bottleneck resource, in these studies the overhead of network device virtualization does not manifest in reduced throughput. In c...

Citation Context

...ur approach, we connect drivers at a high abstraction level—the request—and thus avoid the possibility of corrupting one driver by the actions of another driver. Like us, another contemporary project =-=[12, 13]-=- uses paravirtualization for user-level device drivers, but focuses on achieving a unified device API and driver isolation. Our approach specifically leaves driver interfaces undefined and thus open f...

Citation Context

...nce. They report performance degradation by a factor of 2 to 3x for receive workloads, and a factor of 5x degradation for transmit workloads. The latter study, unlike previous reported results on Xen =-=[4, 5]-=-, reports network performance under configurations leading to full CPU saturation. In this paper, we propose and evaluate a number of optimizations for improving the networking performance under the X...

Citation Context

...X AssociationsHardware TPM Virtual TPM Instance PCR[0] BIOS mapped mapped PCR[0] PCR[0] PCR[1] BIOS PCR[1] PCR[2] BIOS PCR[2] PCR[2] PCR[3] BIOS PCR[3] PCR[3] PCR[4] BIOS PCR[4] PCR[5] BIOS PCR[5] PCR=-=[6]-=- BIOS PCR[6] PCR[7] Bootloader PCR[7] PCR[8] OS 1 IM PCR[8] PCR[9] PCR[9] OS 2 IM PCR[10] PCR[10] PCR[11] PCR[12] measurement providers PCR[11] PCR[12] PCR[13] PCR[13] PCR[14] PCR[14] PCR[15] PCR[15] ...

Citation Context

...s of a fully fledged Linux (millions of lines of code) and therefore is the weak link with respect to fault isolation—i.e., any fault in the host VM will cause the whole system to fail. Fraser et al. =-=[6]-=- propose to mitigate this problem by isolating device drivers into independent driver domains (IDDs). While the overall Linux kernel is large due to the number of device drivers, filesystems, and netw...

Citation Context

...cs of supporting a growing number of Internet-based application services has created a demand for server consolidation. Consequently, there has been a resurgence of interest in machine virtualization =-=[2, 3, 4, 7, 9, 12, 13, 18, 19]-=-. A virtual machine monitor (VMM) enables multiple virtual machines, each encapsulating one or more services, to share the same physical machine safely and fairly. Specifically, it provides This work ...

Citation Context

...emory error detection and recovery with few code changes and at a significantly lower performance cost than existing solutions based on hardware-enforced domains, such as Nooks [33], L4 [21], and Xen =-=[13]-=-, or software-enforced domains, such as SFI [35]. The principles used in SafeDrive can be applied to any large system with loadable, error-prone extension modules. In this paper we describe our experi...

Citation Context

...r-VM communication, Xen provides event channels and a mechanism to establish shared memory regions [4]. Shared memory can be established via the grant table interface or using direct foreign mappings =-=[14]-=-. Event channels are a lightweight event delivery mechanism that may be used both to virtualise interrupts and enable communication between VMs. They may be used to send only a single bit of informati...