WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

RE: [Xen-devel] [PATCH 0/5] VT-d support for PV guests

To: "Tian, Kevin" <kevin.tian@xxxxxxxxx>, "Espen Skoglund" <espen.skoglund@xxxxxxxxxxxxx>
Subject: RE: [Xen-devel] [PATCH 0/5] VT-d support for PV guests
From: "Ian Pratt" <Ian.Pratt@xxxxxxxxxxxxx>
Date: Wed, 21 May 2008 11:26:48 +0100
Cc: Ian Pratt <Ian.Pratt@xxxxxxxxxxxxx>, xen-devel@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 21 May 2008 03:27:36 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <D470B4E54465E3469E2ABBC5AFAC390F024D92E4@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <18481.58026.284129.700801@xxxxxxxxxxxxxxxxxx><C4583ED4.18C1B%keir.fraser@xxxxxxxxxxxxx><18482.43836.546105.964056@xxxxxxxxxxxxxxxxxx><DD74FBB8EE28D441903D56487861CD9D2EBE0017@xxxxxxxxxxxxxxxxxxxxxx><18482.56286.735593.611302@xxxxxxxxxxxxxxxxxx> <DD74FBB8EE28D441903D56487861CD9D2EBE052B@xxxxxxxxxxxxxxxxxxxxxx> <D470B4E54465E3469E2ABBC5AFAC390F024D92DD@xxxxxxxxxxxxxxxxxxxxxxxxxxxx> <DD74FBB8EE28D441903D56487861CD9D2EC9E093@xxxxxxxxxxxxxxxxxxxxxx> <D470B4E54465E3469E2ABBC5AFAC390F024D92E3@xxxxxxxxxxxxxxxxxxxxxxxxxxxx> <DD74FBB8EE28D441903D56487861CD9D2EC9E0B3@xxxxxxxxxxxxxxxxxxxxxx> <D470B4E54465E3469E2ABBC5AFAC390F024D92E4@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: Aci6g3hUxhZrPrFkQBC7vi1rbgSYSAACfeIQABLbWwAACYrWsAAAWI8QAACihvAAAFxA4AAKAu1Q
Thread-topic: [Xen-devel] [PATCH 0/5] VT-d support for PV guests
> >For ballooned frames, Xen should be able to put them on a
> >'pending' list
> >awaiting completion of a flush (hence the flush is typically not
> >synchronous).
> 
> It seems so. Just one security concern: it's possible to have
decreased
> frames allocated to another VM before completion of async flush. In
> this case, the IOMMU still caches old mapping and thus it leaks a
window
> for mallicious domain/device to touch those frames...
> 
> But we may force a delayed completion check when a free page is
> allocated to a new VM or inserted to other p2m table. Then I agree
upon
> page's specific usage, async flush is possible. :-)

Yep, that's the purpose of the 'pending' list(s): pages don't graduate
to the free list until synchronized against flush completion.

> >Frames that transition to pagetable frames are more problematic. It's
> >probably better to modify the guest to create a separate quicklist
for
> >pagetable frames, so they get recycled and remain out of the
> >IOMMU until
> >they return to the free list.
> >
> 
> So you're already talking about one more step from current
> implentation, to selectively insert mapping as device really requires.
Create a PV
> iommu interface may serve this purpose more accurately.

Linux 2.4 had a concept of a quicklist that was used to recycle
pagetable pages rather than just returning them to the free list. It got
removed in 2.6, but reinstating something similar would help Xen,
particularly in the case with an IOMMU. 

Ian 




_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel