公开(公告)号：US20230229609A1

公开(公告)日：2023-07-20

申请号：US17578290

申请日：2022-01-18

Applicant: VMware, Inc.

Inventor： Alexander Dean Gotsis ,  Jiajun Cao ,  Radu Rugina ,  James Eugene Chow ,  Srihari Venkatesan ,  Jeffrey W. Sheldon ,  Kalaiselvi Sengottuvel

IPC: G06F13/28 ,  G06F9/455

CPC classification number: G06F13/28 ,  G06F9/45558 ,  G06F2009/4557

Abstract: Techniques for implementing IOMMU-based DMA tracking for enabling live migration of VMs that use passthrough physical devices are provided. In one set of embodiments, these techniques leverage an IOMMU feature known as dirty bit tracking which is available in most, if not all, modern IOMMU implementations. The use of this feature allows for the tracking of passthrough DMA in a manner that is device/vendor/driver agnostic, resulting in a solution that is universally applicable to all passthrough physical devices.

公开(公告)号：US20230350815A1

公开(公告)日：2023-11-02

申请号：US18340120

申请日：2023-06-23

Applicant: VMware, Inc.

Inventor： Srihari Venkatesan ,  Sunil Kotian ,  Andrei Warkentin ,  Kalaiselvi Sengottuvel

IPC: G06F12/14 ,  G06F12/109 ,  G06F13/42 ,  G06F9/455 ,  G06F12/02

CPC classification number: G06F12/145 ,  G06F12/1433 ,  G06F12/109 ,  G06F13/4221 ,  G06F9/45558 ,  G06F12/0238 ,  G06F2009/45587 ,  G06F2009/45583

Abstract: Disclosed are various embodiments for various approaches for implementing trust domains to provide boundaries between PCIe devices connected to the same PCIe switch. A first trust identifier can be assigned to a first virtual machine hosted by the computing device. The first trust identifier can also be assigned to a first PCIe device assigned to the first virtual machine. Later, it can be determined that a second PCIe device connected to the PCIe switch is assigned a second trust identifier assigned to a second virtual machine. An Address Control Services (ACS) direct translated bit for peer-to-peer memory requests in the PCIe switch can be disabled in response to a determination that the second PCIe device is associated with the second trust identifier assigned to the second virtual machine.

公开(公告)号：US11741021B2

公开(公告)日：2023-08-29

申请号：US17577584

申请日：2022-01-18

Applicant: VMware, Inc.

Inventor： Srihari Venkatesan ,  Sunil Kotian ,  Andrei Warkentin ,  Kalaiselvi Sengottuvel

IPC: G06F12/00 ,  G06F12/14 ,  G06F12/109 ,  G06F13/42 ,  G06F9/455 ,  G06F12/02

CPC classification number: G06F12/145 ,  G06F9/45558 ,  G06F12/0238 ,  G06F12/109 ,  G06F12/1433 ,  G06F13/4221 ,  G06F2009/45583 ,  G06F2009/45587

Abstract: Disclosed are various embodiments for various approaches for implementing trust domains to provide boundaries between PCIe devices connected to the same PCIe switch. A first trust identifier can be assigned to a first virtual machine hosted by the computing device. The first trust identifier can also be assigned to a first PCIe device assigned to the first virtual machine. Later, it can be determined that a second PCIe device connected to the PCIe switch is assigned a second trust identifier assigned to a second virtual machine. An Address Control Services (ACS) direct translated bit for peer-to-peer memory requests in the PCIe switch can be disabled in response to a determination that the second PCIe device is associated with the second trust identifier assigned to the second virtual machine.

公开(公告)号：US20230229602A1

公开(公告)日：2023-07-20

申请号：US17577584

申请日：2022-01-18

Applicant: VMware, Inc.

Inventor： Srihari Venkatesan ,  Sunil Kotian ,  Andrei Warkentin ,  Kalaiselvi Sengottuvel

IPC: G06F12/14 ,  G06F12/109 ,  G06F12/02 ,  G06F13/42 ,  G06F9/455

CPC classification number: G06F12/145 ,  G06F12/1433 ,  G06F12/109 ,  G06F12/0238 ,  G06F13/4221 ,  G06F9/45558 ,  G06F2009/45583 ,  G06F2009/45587

Abstract: Disclosed are various embodiments for various approaches for implementing trust domains to provide boundaries between PCIe devices connected to the same PCIe switch. A first trust identifier can be assigned to a first virtual machine hosted by the computing device. The first trust identifier can also be assigned to a first PCIe device assigned to the first virtual machine. Later, it can be determined that a second PCIe device connected to the PCIe switch is assigned a second trust identifier assigned to a second virtual machine. An Address Control Services (ACS) direct translated bit for peer-to-peer memory requests in the PCIe switch can be disabled in response to a determination that the second PCIe device is associated with the second trust identifier assigned to the second virtual machine.