Xen Directions Intro Slides

•

1 gostou•1,282 visualizações

The Linux Foundation

Xen Directions 2009 Introduction to Event at LinuxTAG in Berlin, Germany on June 27, 2009

Tecnologia

Xen Directions Europe 2009
Stephen Spector
Xen.org Community Manager

Welcome
"I think Xen is a great product. It is easy to use.
But most important is the very active
community around it.
I would not say many 'issues' around using
Xen, but 'challenges' are addressed there [in
the community] with the things every virtual
machine has to deal with. Things such as: I/O-
issues, guaranteed scheduling issues, domain
zero security concerns,…
The community out there is very helpful. That
was a very big reason for us in selecting Xen."
Werner Vogels
CTO,
Amazon.com

Xen.org Mission Statement
• Build the industry standard open source hypervisor
– Core "engine" that is incorporated into multiple vendors’ products
• Maintain Xen’s industry-leading performance
– Be first to exploit new hardware acceleration features
– Help OS vendors paravirtualize their OSes
• Maintain Xen’s reputation for stability and quality
– Security must now be paramount
• Support multiple CPU types; big and small systems
– From server to client to mobile phone
• Foster innovation
• Drive interoperability

4
Xen Directions Europe 2009
Agenda
10:00 - 11:00 Ian Pratt Citrix Systems & Xen.org
11:00 - 11:30 Jerg Theurer HP
11:30 - 12:00 Dirk Hohndel Intel
12:00 - 12:30 Ruben S. Montero University of Madrid
12:30 - 13:00 Christian Rothe Oracle
13:00 - 15:00 Keynote LinuxTag Event
15:00 - 15:30 Frank Kohler Citrix Systems
15:30 - 16:00 Boris Quiroz Substance
16:00 - 16:30 Björn Brundert Lufthansa Systems
16:30 - 17:00 Chris Schlaeger AMD
17:00 - 17:30 Stephen Spector Citrix Systems & Xen.org
17:30 - 18:00 Q&A with Ian Pratt / Stephen Spector

Thanks
Thanks to the LinuxTag event team for
allowing Xen.org to host our inaugural Xen
Directions event.

Mais conteúdo relacionado

Mais procurados

Xen Orchestra is a web based management tool for the XAPI toolstack that is developed by the Xen Project. XAPI is a fully featured management API for Xen, that is also used by the recently open sourced enServer. We'll see how Xen Orchestra leverages XAPI by allowing a complete control of your virtualized infrastructure. First, we'll explain quickly the XO architecture (such as cache system, asynchronous events, user management with tokens…) Then, a review of current and future possibilities will be exposed, to show what you can expect from this solution: powerful visualizations with d3js, neat interface, orchestration features and integration with all XAPI's capable hosts (XenServer or any distro with XAPI packages, such as Debian, Ubuntu or CentOS). Finally, we'll talk about how to contribute.

Xen Orchestra: XAPI and XenServer from the web-XPUS13 Lambert

The Linux Foundation

Xen Project Hypervisor for the Cloud

The Linux Foundation

Docker open manage_meetup_sep_2016

Jose De La Rosa

Rackspace has years of experience with running Xen at scale, starting with Xen and migrating to XenServer. We will share why we use Xen/XenServer along with some of the issues that we've experienced. We will touch on our experience with migrating from Xen to XenServer and the challenges there. We will share information about Rackspace Cloud Servers architecture, and touch briefly on OpenStack when doing so. We will explain how we use Xen to quickly deploy new Openstack services with what we call Nova on Nova. And finally, we will discuss what additional features and improvements are needed and why.

Scaling Xen within Rackspace Cloud Servers

The Linux Foundation

Do you dream of being able to spin up ten or twenty (or a thousand) virtual machines in an instant? Discover and repair resource bottlenecks without moving a finger? Dodge the loss of an entire storage array with no-one noticing? Span across data centers with a fleet of virtual machines? This is no sales pitch; during this tutorial, we’ll demonstrate how to leverage truly FOSS tools to build a powerful, scalable cloud that easily competes with those proprietary solutions! This deep-dive into Xen, Xen Cloud Platform, and other FOSS cloud tools and concepts is intended both for those ready to wholeheartedly embrace virtualization and for those already seasoned in general virtualization practices. You’ll leave with a collection of pre-made tools that you can use right out of the box or modify to your liking. You’ll also leave with immediately useful knowledge on best practices and common pitfalls, presented by actual FOSS practitioners like you. We begin this tutorial by discussing Xen, Xen Cloud Platform (XCP), and XCP cloud concepts (pools, hosts, storage, networks, etc.). We then explore in detail the API that makes Xen so useful for building a cloud, explore provisioning of hosts and guests using PXE, and discuss templating and installing guest virtual machines. Critical to understanding potential bottlenecks, identifying tuning opportunities and planning for the future, we will discuss performance monitoring and methodologies. Next, we teach you how to make the most of your new FOSS cloud capabilities and discuss in detail high availability infrastructure for storage and networking, advanced networking capabilities like bonding/VLANs, and the cloud orchestration tools that save you time and money. All of this with a focus on XCP in enterprise environments. Tools discussed include DRBD, Pacemaker, Open vSwitch, Cloudstack, Openstack, and more. We conclude by shedding light on exciting developments: Xen 4.2 has recently been released, with just over a year of development time and nearly 3,000 changesets. We will discuss many of the new features introduced in 4.2, as well as what changes we have in store for the 4.3 release as well as other exciting developments.

Oscon 2012 : From Datacenter to the Cloud - Featuring Xen and XCP

The Linux Foundation

Why xen slides

The Linux Foundation

node.js and Containers: Dispatches from the Frontier

bcantrill

Xen ATG case study

The Linux Foundation

Xen 10th anniversary Status Report (at SELF 2013)

Russell Pavlicek

Securing Your Cloud with Xen (CloudOpen NA 2013)

Russell Pavlicek

The Peril and Promise of Early Adoption: Arriving 10 Years Early to Containers

bcantrill

Art of Using Xen at Scale

The Linux Foundation

The dream is alive! Running Linux containers on an illumos kernel

bcantrill

The Xen Hypervisor was built for the Cloud from the outset: when Xen was designed, we anticipated a world, which today is known as cloud computing. Today, Xen powers the largest clouds in production. This talk explores success criteria, architecture, trade-offs and challenges for cloudy hypervisors. It is intended for users and developers and starts with a brief introduction to Xen and XCP, their architecture and on common challenges for KVM and Xen. I will introduce the concept of domain disaggregation as an approach to increase security, robustness and scalability: all important factors for building clouds at scale and show how advanced security features suchas Xen Security Modules and SELinux can help secure your cloud further. The talk will conclude with exciting developments in the Xen community, such as Xen for ARM servers, a new virtualization mode for Xen, running applications without OS in a Xen guest and point out their implications for building open source clouds.

Scale11x : Virtualization with Xen and XCP

The Linux Foundation

Ian Pratt Nsdi Keynote Apr2008

The Linux Foundation

8 christian ferber xen_server_6_news

Digicomp Academy AG

CloudBees

With the rapid growth in computing power of embedded platforms, system designers are turning to hypervisors to consolidate functionality in order to reduce the Size, Weight, Power, and Cost of embedded systems. With the recent addition of ARM support to the Xen hypervisor, Xen provides an attractive Open Source option for such systems. However, some of the industries most interested in this technology, such as automotive, medical, and avionics, have strict safety certification requirements. Nathan Studer will give a brief overview on DornerWorks efforts certifying Xen, describe the hurdles and advantages that Xen and its development model lend to the certification effort, and layout a proposed path for certifying Xen.

XPDS14: Xen and the Art of Certification - Nathan Studer & Robert VonVossen, ...

The Linux Foundation

CloudStack, the world's leading open-source cloud infrastructure platform, was recently donated to the Apache Foundation, and is now an incubated Apache project. Ewan Mellor, Director of Engineering in the Citrix Cloud Platforms Group will describe the CloudStack project and explain why Xen is the pre-eminent hypervisor in public clouds today. He will describe the changes coming in CloudStack in the next 12 months, and how they are going to change the way that Xen is consumed in public and private clouds next year.

Xen and Apache cloudstack

The Linux Foundation

Experiences porting KVM to SmartOS

bcantrill

Mais procurados (20)

Xen Orchestra: XAPI and XenServer from the web-XPUS13 Lambert

Xen Project Hypervisor for the Cloud

Docker open manage_meetup_sep_2016

Scaling Xen within Rackspace Cloud Servers

Oscon 2012 : From Datacenter to the Cloud - Featuring Xen and XCP

Why xen slides

node.js and Containers: Dispatches from the Frontier

Xen ATG case study

Xen 10th anniversary Status Report (at SELF 2013)

Securing Your Cloud with Xen (CloudOpen NA 2013)

The Peril and Promise of Early Adoption: Arriving 10 Years Early to Containers

Art of Using Xen at Scale

The dream is alive! Running Linux containers on an illumos kernel

Scale11x : Virtualization with Xen and XCP

Ian Pratt Nsdi Keynote Apr2008

8 christian ferber xen_server_6_news

CloudBees

XPDS14: Xen and the Art of Certification - Nathan Studer & Robert VonVossen, ...

Xen and Apache cloudstack

Experiences porting KVM to SmartOS

Destaque

The Xen Project has been producing open source virtualization technologies for the past 10 years. It currently enables some of the largest clouds in the industry. However, decisions made on both the community and business fronts a few years back nearly caused the Xen Project to collapse on itself. Through a series of corrective actions, Xen is once again moving forward with major advances and a growing community. We will discuss some of the lessons learned from this experience, including lessons from both community and business vantage points. We will also focus on maintaining a healthy relationship between a community and a business entity as a means of keeping a project vibrant.

Lessons Learned from Xen - SELF2013

The Linux Foundation

LinuxCon Japan 13 : 10 years of Xen and Beyond

The Linux Foundation

Visual Dictionary- Admixture

admixture

Mobile Marketing 101

Mylik Ganey

In the last decade, the open source development model has been extraordinarily successful. However, this success came at a cost. Today, we are experiencing an explosion of open source projects, escalating competition amongst projects, and commercial interests driving projects at an ever increasing rate. To succeed in the long run, open source projects need to employ a set of management techniques to overcome these issues. To illustrate how this is accomplished, we will draw on the 10 year history of the Xen project as a case study. Xen started in 2003 with strong university roots, quickly evolving into a thriving code-centric project with a development culture very similar to the Linux kernel. The project was instrumental in creating the cloud computing space as we know it today. Large companies such as Amazon, Citrix, and Rackspace, as well as many others, were able to build thriving businesses using open source Xen. Yet five years later, the project started struggling in multiple areas: it failed to engage its user base, becoming inward focused, and suffering from fragmentation caused by pressure from commercial interests. As a result, Xen lost the support of a number of key Linux distributions. Xen started to be perceived as old and outdated, despite a swelling user base, a growing and diversifying contributor community, an increasing number of Xen-based commercial solutions, and numerous Xen-powered open source projects. Some onlookers even predicted the imminent demise of the project. The project clearly had an image problem, which could have become a self-fulfilling prophecy. But, because of a program of cultural change initiated 2 years ago, the Xen project of 2013 is no longer crippled by the problems which nearly caused its downfall. We will explore the causes of the issues which arose, highlighting mistakes that were made, and revealing their effect on the community. We will also show how almost any issue that threatens the success of an open source project can be addressed using a combination of good community management, excellent collaboration infrastructure, wise marketing, and good governance to align the interests of a project’s stake-holders. By employing each of these techniques in a complementary fashion, we can ensure the long-term success of a project.

OSCON 2013: "Case Study: What to do when your project outgrows your company"

The Linux Foundation

Suspension of deportation for 50 dollars a week -Amnesty 2014

Pablo Picasso

Drawing Presentation

Xen Directions HXEN

Destaque (9)

Lessons Learned from Xen - SELF2013

LinuxCon Japan 13 : 10 years of Xen and Beyond

Visual Dictionary- Admixture

Mobile Marketing 101

OSCON 2013: "Case Study: What to do when your project outgrows your company"

Suspension of deportation for 50 dollars a week -Amnesty 2014

Pablo Picasso

Drawing Presentation

Xen Directions HXEN

Semelhante a Xen Directions Intro Slides

Xen Overview Q22009 En

Rishi Bhargava

Xen Overview Q3 2009

The Linux Foundation

Xen Directions Intro Slides

The Linux Foundation

Demo: Easily Deploy Applications with Standing Cloud

OpSource

GWAVACon 2013: Novell Keynote - Dave Wilkes

GWAVA

The Xen Project is used by more than 10 million users, powers some of the largest clouds on the planet, and is starting to build momentum in embedded and safety-conscious market segments. It is also nearly 16 years old. The Xen Project’s success and longevity can be attributed to its flexible architecture, but more importantly to enabling community members to contribute ideas and code, even if they are not core to the project's main use-case. This has brought Xen far beyond server virtualization. Lars will share how the project has supported new technologies and ideas, which may include some really interesting things you might not know about Xen (especially around defense applications), and will derive best practices that may help other projects.

Scale17x: Thinking outside of the conceived tech comfort zone

The Linux Foundation

It is no accident that Xen software powers some of the largest Clouds in existence. From its outset, the Xen Project was intended to enable what we now call Cloud Computing. This session will explore how the Xen Architecture addresses the needs of the Cloud in ways which facilitate security, throughput, and agility. It will also cover some of the hot new developments of the Xen Project. Julien Grall, Citrix

Kernel Recipes 2014 - Xen as a foundation for cloud infrastructure

Anne Nicolas

Tracing The Evolution Open Source & Embedded Systems - Mr. Jayakumar Balasubr...

Lounge47

Tracing the evolution - Open source & Embedded systems

Emertxe Information Technologies Pvt Ltd

Apresentação de João Batista da Novell Portugal sobre Soluçőes colaborativas e interoperáveis sobre Linux no Evento SugarCRM Road Show Lisbon 2009. O evento foi organizado pela DRI(www.dri.pt) no dia 19 de Maio no Fórum Tecnológico de Lisboa, um espaço situado numa zona central de Lisboa. Este evento contou com a presença de cerca de 270 participantes e teve como principal objectivo a discussão de toda a temática envolvente do CRM (Customer Relationship Management), com especial foco na solução SugarCRM.

Evento Sugar Crm 2009 - Soluçőes colaborativas e interoperáveis sobre Linux

DRI - Discovery/Reinvention/Integration/

What do “Crazy in Love” by Beyonce and the “Xen Project” have in common? They are both 15-year-old hits. Flash forward to today. The Xen Project is used by more than 10 million users, powers some of the largest clouds on the planet, and is starting to build momentum in embedded and safety-conscious market segments. The Xen Project played a key role in developing technologies outside of the hypervisor, like hardware virtualization, and open source security disclosure standards that impact entire industries. The Xen Project’s success and longevity can be attributed to its flexible architecture, but more importantly to enabling community members to contribute ideas and code, even if they are not core to the project's main use-case. We will share how the project has supported new technologies and ideas (sometimes in the form of failures and sometimes wins) and will derive best practices that may help other projects .

Xen Project 15 Years down the Line

The Linux Foundation

Future-Proof Your Desktops - How City of Kent is Implementing VDI for 800 Wor...

Unidesk Corporation

Scaleable Enterprise Computing Andre Hill

webhostingguy

Technology expert Lee Bushen hosts Ian Jones, Ron Oglesby and a team of Unidesk experts to explain all you need to know about App Layering and Unidesk's solution. We demonstrate a full setup of Unidesk layering: - Setting up the Enterprise Layer Manager - Creating Operating System layers - Creating app layers for inclusion in base images or for elastic assignment at login. - User experience - Live Interview - Ron Oglesby, Citrix - Live Interview - Stuart Moore, Cloudhouse Our special guest is Stuart Moore from Cloudhouse, who shows you how move to new Windows OS's like 2012R2 and 2016 and upgrade to XenApp 7.12 whilst still taking legacy applications along with you.

Citrix Desktop Master Class - Unidesk App Layering - Feb 2017

Lee Bushen

DevOps - Introduction to data science

Frank Kienle

Presentation smart computing starts with a virtual desktop strategy

solarisyougood

Nutanix se despacha en días, y su despliegue se realiza en menos de un día (realmente!) Permite no interrumpir las operaciones en curso (reducción del 99,7% en los tiempos de inactividad no planificados) Escala fácilmente - Añada capacidad cuando la necesite- No más sobre aprovisionamiento (el tiempo de despliegue es 85% más rápido) Reduce el costo y la complejidad de su sistema de computación y almacenamiento - hasta un 90% de ahorro de energía y espacio Todos sus sistemas gestionados a través de una interfaz de panel único (71% menos tiempo de gestión de un entorno Nutanix) Proporciona capacidades avanzadas de almacenamiento de clase empresarial (Deduplicación, Compresión, etc.) Soporte de Clase Mundial – 88 Net Promotor Score (El siguiente proveedor de tecnología más alta de la lista fue Intel- en un 53!)

Nutanix

rosslili

Track f evolving trusted platforms - arm

chiportal

At National Instruments, we have developed an automation and provisioning framework called PIE (Programmable Infrastructure Environment) that we use daily on our devops team. Similar tools are available such as chef or puppet, but what makes PIE unique is its ability to work in multi-cloud deployments (Azure and AWS) along with multiple node OS types (linux and windows). It uses zookeeper to keep state and track dependencies across nodes and services. When building PIE we actively considered how to implement it in a Rugged way for a DevOps team. As noted in the deck on slide 68, we are Rugged by Design and Devops by Culture. We see these as intersecting domains that have the ability to impact each other. For more info see ruggeddevops.org

Coding Secure Infrastructure in the Cloud using the PIE framework

James Wickett

VersionOne - Eos Group Customer Success Story

warren elliott

Semelhante a Xen Directions Intro Slides (20)

Xen Overview Q22009 En

Xen Overview Q3 2009

Xen Directions Intro Slides

Demo: Easily Deploy Applications with Standing Cloud

GWAVACon 2013: Novell Keynote - Dave Wilkes

Scale17x: Thinking outside of the conceived tech comfort zone

Kernel Recipes 2014 - Xen as a foundation for cloud infrastructure

Tracing The Evolution Open Source & Embedded Systems - Mr. Jayakumar Balasubr...

Tracing the evolution - Open source & Embedded systems

Evento Sugar Crm 2009 - Soluçőes colaborativas e interoperáveis sobre Linux

Xen Project 15 Years down the Line

Future-Proof Your Desktops - How City of Kent is Implementing VDI for 800 Wor...

Scaleable Enterprise Computing Andre Hill

Citrix Desktop Master Class - Unidesk App Layering - Feb 2017

DevOps - Introduction to data science

Presentation smart computing starts with a virtual desktop strategy

Nutanix

Track f evolving trusted platforms - arm

Coding Secure Infrastructure in the Cloud using the PIE framework

VersionOne - Eos Group Customer Success Story

Mais de The Linux Foundation

Static partitioning is used to split an embedded system into multiple domains, each of them having access only to a portion of the hardware on the SoC. It is key to enable mixed-criticality scenarios, where a critical application, often based on a small RTOS, runs alongside a larger non-critical app, typically based on Linux. The two domains cannot interfere with each other. This talk will explain how to use Xen for static partitioning. It will introduce dom0-less, a new Xen feature written for the purpose. Dom0-less allows multiple VMs to start at boot time directly from the Xen hypervisor, decreasing boot times drastically. It makes it very easy to partition the system without virtualization overhead. Dom0 becomes unnecessary. This presentation will go into details on how to setup a Xen dom0-less system. It will show configuration examples and explain device assignment. The talk will discuss its implications for latency-sensitive and safety-critical environments.

ELC2019: Static Partitioning Made Simple

The Linux Foundation

TrenchBoot is a cross-community OSS integration project for hardware-rooted, late launch integrity of open and proprietary systems. It provides a general purpose, open-source DRTM kernel for measured system launch and attestation of device integrity to trust-centric access infrastructure. TrenchBoot closes the UEFI Measurement Gap and reduces the need to trust system firmware. This talk will introduce TrenchBoot architecture and a recent collaboration with Oracle to launch the Linux kernel directly with Intel TXT or AMD SVM Secure Launch. It will propose mechanisms for integrating the Xen hypervisor into a TrenchBoot system launch. DRTM-enabled capabilities for client, server and embedded platforms will be presented for consideration by the Xen community.

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

The Linux Foundation

Artem will briefly cover what has been done since the first talk on Xen in Automotive domain back in 2013, what is going on now and what is still missing for broad adaptation of Xen in vehicles. The following topics will be covered: Embedded/automotive features of Xen Collaboration with AGL and GENIVI organizations for standardization Efforts on Functional Safety compliance Artem will also go over typical automotive use scenarios for Xen which may not be the same as generic computing use of hypervisor.

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

The Linux Foundation

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

The Linux Foundation

In recent years unikernels have shown immense performance potential (e.g., boot times of only a few ms, image sizes of only hundreds of KBs).The fundamental drawback of unikernels is that they require that applications be manually ported to the underlying minimalistic OS, needing both expert work and often considerable amount of time. The Unikraft project provides a unikernel code base and build system that significantly simplifies the building of unikernels. In addition to support for a number CPU architectures, languages and frameworks, Unikraft provides debugging and tracing features that are generally sorely missing from unikernel projects. In this talk we will talk about these features, show a set of preliminary performance numbers, and provide a roadmap for the project's future.

XPDDS19 Keynote: Unikraft Weather Report

The Linux Foundation

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

The Linux Foundation

This talk will introduce Dom0-less: a new way of using Xen to build mixed-criticality solutions. Dom0-less is a Xen feature that adds a novel approach to static partitioning based on virtualization. It allows multiple domains to start at boot time directly from the Xen hypervisor, decreasing boot times dramatically. Xen userspace tools, such as xl and libvirt, become optional. Dom0-less extends the existing device tree based Xen boot protocol to cover information required by additional domains. Binaries, such as kernels and ramdisks, are loaded by the bootloader (u-boot) and advertised to Xen via new device tree bindings. The audience will learn how to use Dom0-less to partition the system. Uboot and device tree configuration details will be explained to enable the audience to get the most out of this feature. The talk will include a status update and details on future plans.

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

The Linux Foundation

As the number of contributions grow, reviewer bandwidth becomes a bottleneck; and maintainers are always asking for more help. However, ultimately maintainers must at least Ack every patch that goes in; so if you're not a maintainer, how can you contribute? Why should anyone care about your opinion? This talk will try to lay out some advice and guidelines for non-maintainers, for how they can do code review in a way which will effectively reduce the load on maintainers when they do come to review a patch.

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

The Linux Foundation

This talk is a follow-up to our Summit 2017 presentation in which we covered our plans for Intel VMFUNC and #VE, as well as related use-cases. This year, we will provide a report on what we have accomplished in Xen 4.12, and what remains to be addressed. We will also give a brief status update of VMI on AMD hardware. The session will end with some real-world numbers of the Hypervisor Introspection solution running on Citrix Hypervisor 8.0 with #VE enabled.

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. Besides technical and compliance issues (such as ISO 26262 vs IEC 611508) transitioning an existing project to become more easily safety certifiable requires significant changes to development practices within an open source project. In this session, we will lay out some challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the Xen Project has followed thus far and highlight lessons learned along the way. The talk will primarily focus on necessary process, tooling changes and community challenges that can prevent progress. We will be offering an in-depth review of how Xen Project is approaching this challenging goal and try to derive lessons for other projects and contributors.

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. The Xen Project, a secure and stable hypervisor that is used in many different markets, has been exploring the feasibility of building safety certified products on top of Xen for a year, looking at key aspects of its code base and development practices. In this session, we will lay out the motivation and challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the project has followed thus far and highlight lessons learned along the way. The talk will cover technical enablers, necessary process and tooling changes and community challenges offering an in-depth review of how Xen Project is approaching this exciting and and challenging goal.

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

The Linux Foundation

2018 saw fundamental shifts in security boundaries which were previously taken for granted. A lot of work has been done in the past 2 years, and largely in secret under embargo, but there is plenty more work to be done to strengthen the existing mitigations and to try to recover some performance without reopening security holes. This talk will look at speculative execution sidechannels, the work which has already been done to mitigate the security holes, and future work which hopes to bring some improvements.

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

The Linux Foundation

The Arm architecture provides a set of guidelines that any software should abide by when accessing the memory with MMU off and update page-tables. Failing to do so may result in getting TLB conflicts or breaking coherency. In a previous talk ("Keeping coherency on Arm"), we focused on updating safely the stage-2 (aka P2M) page-tables. This talk will focus on the boot code and Xen memory management. During this session, we will introduce some of the guidelines and when they should be used. We will also discuss how Xen boot sequence needs to be reworked to avoid breaking the guidelines.

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

The Linux Foundation

For many years the QEMU codebase has contained PV backends for Xen guests, giving them paravirtual access to storage, network, keyboard, mouse, etc. however these backends have not been configurable as QEMU devices as their implementation did not fully adhere to the QEMU Object Model (QOM). Particularly the PV storage backend not using proper QOM devices, or qdevs, meant that the QEMU block layer needed to maintain legacy code that was cluttering up the source. This was causing push-back from the maintainers who did not want to accept any patches relating to that Xen backend until it was 'qdevified'. In this talk, I'll explain the modifications I made to QEMU to achieve 'qdevification' of the PV storage backend, how compatibility with the libxl toolstack was maintained, and what the next steps in both QEMU and libxl development should be.

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

The Linux Foundation

PCI is a local computer bus for attaching hardware devices in a computer, and is the main peripheral bus on modern x86 systems. As such, having a proper way to emulate it is crucial for Xen to be able to expose both fully emulated devices or passthrough devices to guests. This talk will focus on the current status of PCI emulation in Xen, how and where it is used, what are its main limitations and future plans to improve it in order to be more robust and modular.

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

The Linux Foundation

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

The Linux Foundation

Xen is a very powerful hypervisor with a talented and diverse developers community. Despite the fact it's almost everywhere (from the Cloud to the embedded world), it can be difficult to set up and manage as a system administrator. General purpose distros have Xen packages, but that's just a start in your Xen journey: you need some tooling and knowledge to have a working and scalable platform. XCP-ng was built to overcome those issues: by bringing Xen to the masses with a fully turnkey distro with Xen as its core. It's the logical sequel to the XCP project, with a community focus from the start. We'll see how it happened, what we did, and what's next. Finally, we'll see the impact of XCP-ng on the Xen Project.

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

The Linux Foundation

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

The Linux Foundation

High level toolstacks for server and cloud virtualization are very mature with large communities using and supporting them. Client virtualization is a much more niche community with unique requirements when compared to those found in the server space. In this talk, we’ll introduce a client virtualization toolstack for Xen (redctl) that we are using in Redfield, a new open-source client virtualization distribution that builds upon the work done by the greater virtualization and Linux communities. We will present a case for maturing libxl’s Go bindings and discuss what advantages Go has to offer for high level toolstacks, including in the server space.

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

The Linux Foundation

Today Xen is scheduling guest virtual cpus on all available physical cpus independently from each other. Recent security issues on modern processors (e.g. L1TF) require to turn off hyperthreading for best security in order to avoid leaking information from one hyperthread to the other. One way to avoid having to turn off hyperthreading is to only ever schedule virtual cpus of the same guest on one physical core at the same time. This is called core scheduling. This presentation shows results from the effort to implement core scheduling in the Xen hypervisor. The basic modifications in Xen are presented and performance numbers with core scheduling active are shown.

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

The Linux Foundation

Mais de The Linux Foundation (20)