设为首页 收藏本站
查看: 790|回复: 0

[软件发布] Xen 4.6 发布,增强安全性和 Intel 支持

[复制链接]

尚未签到

发表于 2015-11-2 07:52:51 | 显示全部楼层 |阅读模式
欢迎加入运维网交流群:263444886   DSC0000.jpg
DSC0001.jpg   Xen 4.6 发布,此版本专注于提高代码质量,安全加固,安全设备的启用,以及发布周期可预测性,主要更新内容分以下几方面:

  •   Hypervisor
  •   Toolstack
  •   Xen Project Test Lab
  •   Linux, FreeBSD and other OSes that utilise the new features
  •   Greater Ecosystem
  详情请看发行说明。
  
  General Hypervisor Updates

  •   The memory event subsystem has been reworked and extended to a new VM event subsystem. The new VM event subsystems supports both the ARM and x86 architectures. It can be used to intercept all sorts of VM events, such as memory access, register access and more. This enables security applications such as zero-footprint guest introspection, host-wide monitoring and many others. Have a look at Tamas’s presentations and Steve’s presentations on this topic to get more insights.
  •   The Xen Security Modules(XSM) now have a default policy that is regularly tested in the Xen Project Test Lab to make sure it is not broken by mistake. This will enable us to switch on XSM by default in the future.
  •   vTPM 2.0 support has been contributed by Intel and the US National Security Agency. To learn more about how to use vTPM and how it can makeyour host more secure, go to our wiki.
  •   Grant table scalability has been improvement significantly by using finer-grained locks in grant tables. In some scenarios aggregate intrahost network throughput has been shown to improve by 100%. Other I/O drivers in Xen should potentially show significant performance improvements as well.
  •   We introduced ticket lock to improve fairness, which provides bettersupport of massive workloads from up to hundreds or thousands of VMs ona single host.
  •   The unused SEDF scheduler has been removed from the hypervisor and toolstack. The Xen Project is committed to actively remove unused code to keep the code base small and to minimize security risks.
  •   We removed Mini-OSfrom the Xen code base into its own tree. Mini-OS started as a demonstration OS, but received significant contributions in recent years(e.g. it is used by many Unikernels). We decide to treat it as a separately maintained independent project with it’s own mailing list andcode tree to make it easier to consume. We hope this will help unikernel communities to more easily consume and contribute to Mini-OS, while reducing the Xen Project Hypervisor footprint.
  x86-specific Hypervisor Updates


  •   The Intel>
  •   Intel Page Modification Logging Technology offloads the page dirty logging duty to hardware. Microbenchmark shows about 7% improvement in SPECJbb and should be particularly beneficial for Live Migration.
  •   Intel Cache Allocation Technologyallows system administrators to assign more L3 cache capacity to individual VMs, resulting in lower latency and higher performance for high-priority workloads such as NFV, real-time and video-on-demand applications.

  •   Intel Memory Bandwidth Monitoringallows system administrators to>
  •   Intel Reserve Memory Region reporting provides a mechanism to reportand reserve memory regions for legacy devices to allow for safe device passthrough.
  •   Virtual Performance Monitoring Unit support makes it possible to profile the Xen Project Hypervisor with the Linux perf tool. Note that some work still needs to be completed within Linux to make perf fully functional.

  •   Virtual NUMA for HVM guest is a continuation of the NUMA work performed in Xen 4.5 and previous>
ARM-specific Hypervisor Updates

  •   The supported number of VCPUs has been increased from 8 to 128 VCPUs on ARM64 platforms.
  •   Passthrough for non-PCI devices allows users to passthrough devices via partial device trees. Full support for PCI device passthrough is currently being worked on.
  •   ARM GICv2 on GICv3 support.
  •   32 bit userspace in 64 bit guest support.
  •   OVMF for ARM contributed by Linaro.
  •   64K page ARM guest support.
  •   Support for the following new Hardware Platforms has been added: Renesas R-Car Gen2, Thunder X, Huawei hip04-d04 and Xilinx ZynqMP SoC.
Toolstack Updates


  •   Live Migration support in libxc / libxl and has been replaced with acompletely new implementation (Migration v2). The new version respects different layers in the Xen Software stack and has been designed to be more robust and extensible to better support next-generation infrastructures and work planned in subsequent hypervisor>
  •   Remus – our High Availability solution – has been reworked and is now based on Migration v2.
  •   Libxl asynchronous operations can now be cancelled. This allows libxl users to cancel long-running asynchronous operations and benefits tool stacks such as libvirt and is beneficial for integration with cloudorchestration stacks.
  •   Improved SPICE/QXL support.
  •   AHCI disk controller support.

  •   A new host I/O topology query interface gives upper layer in the software stack the ability to>
  •   Addition of Xenalyze, which is a tool for analyzing Hypervisor tracebuffers and can be used for debugging and optimization, has been added to the Xen Project codebase as a maintained feature.
Xen Project Test Lab Updates

During the Xen 4.6>

  •   XSM
  •   Stub Domain
  •   VM migration using libvirt between two hosts is now tested.

  •   Live Migration between hosts of different Xen versions is now testedand will help>
  •   Test with different disk formats such as QCOW2, VHD and raw format.
More test cases are in the pipeline, including test case for OpenStack’s devstack, performance and scalability tests, FreeBSD Dom0 etc.
Linux, FreeBSD and other OSes

During the Xen 4.6>

  •   Xen blkfront multiqueue and multipage ring support.
  •   Xen SCSI frontend and backend support.
  •   VPMU kernel support.
  •   Performance improvement in mmap call.
  •   P2M in PV guest can address 512GB or more.
For FreeBSD there were these improvements:

  •   Experimental PVH Dom0/DomU support.

  •   Removal of>
  •   Blkfront indirect descriptor support by FreeBSD developer Colin Percival.
  •   Removal of broken FreeBSD specific blkfront/back extensions.
  •   ARM32 and ARM64 guest support are underway.
Greater Ecosystem

  •   Project Raisin provides an easier way to build and package Xen. It also includes a basic test suite for developer to test their changes.
  •   Our OpenStack CI loop is up and running and is testing OpenStack changes against the Xen Project Hypervisor
  •   Xen Hypervisor support moved from quality group C to group B in OpenStack.
  
  
  Xen 是一个开放源代码虚拟机监视器,由剑桥大学开发。它打算在单个计算机上运行多达100个满特征的操作系统。操作系统必须进行显式地修改(“移植”)以在Xen上运行(但是提供对用户应用的兼容性)。这使得Xen无需特殊硬件支持,就能达到高性能的虚拟化。

运维网声明 1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003
2、本站所有主题由该帖子作者发表,该帖子作者与运维网享有帖子相关版权
3、所有作品的著作权均归原作者享有,请您和我们一样尊重他人的著作权等合法权益。如果您对作品感到满意,请购买正版
4、禁止制作、复制、发布和传播具有反动、淫秽、色情、暴力、凶杀等内容的信息,一经发现立即删除。若您因此触犯法律,一切后果自负,我们对此不承担任何责任
5、所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其内容的准确性、可靠性、正当性、安全性、合法性等负责,亦不承担任何法律责任
6、所有作品仅供您个人学习、研究或欣赏,不得用于商业或者其他用途,否则,一切后果均由您自己承担,我们对此不承担任何法律责任
7、如涉及侵犯版权等问题,请您及时通知我们,我们将立即采取措施予以解决
8、联系人Email:admin@iyunv.com 网址:www.yunweiku.com

所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其承担任何法律责任,如涉及侵犯版权等问题,请您及时通知我们,我们将立即处理,联系人Email:kefu@iyunv.com,QQ:1061981298 本贴地址:https://www.iyunv.com/thread-133775-1-1.html 上篇帖子: KDE Plasma 5.4.2 发布,有多项修复 下篇帖子: MongoDB 3.0.7 发布,改进 WiredTiger 性能
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

扫码加入运维网微信交流群X

扫码加入运维网微信交流群

扫描二维码加入运维网微信交流群,最新一手资源尽在官方微信交流群!快快加入我们吧...

扫描微信二维码查看详情

客服E-mail:kefu@iyunv.com 客服QQ:1061981298


QQ群⑦:运维网交流群⑦ QQ群⑧:运维网交流群⑧ k8s群:运维网kubernetes交流群


提醒:禁止发布任何违反国家法律、法规的言论与图片等内容;本站内容均来自个人观点与网络等信息,非本站认同之观点.


本站大部分资源是网友从网上搜集分享而来,其版权均归原作者及其网站所有,我们尊重他人的合法权益,如有内容侵犯您的合法权益,请及时与我们联系进行核实删除!



合作伙伴: 青云cloud

快速回复 返回顶部 返回列表