Re: Redoing eXclusive Page Frame Ownership (XPFO) with isolated CPUs in mind (for KVM to isolate its guests per CPU)
From: Julian Stecklina
Date: Fri Aug 31 2018 - 03:45:50 EST
On Mon, 20 Aug 2018 15:27 Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote:
> On Mon, Aug 20, 2018 at 3:02 PM Woodhouse, David <dwmw@xxxxxxxxxxxx> wrote:
>> It's the *kernel* we don't want being able to access those pages,
>> because of the multitude of unfixable cache load gadgets.
> I guess the proof is in the pudding. Did somebody try to forward-port
> that patch set and see what the performance is like?
I've been spending some cycles on the XPFO patch set this week. For the
patch set as it was posted for v4.13, the performance overhead of
compiling a Linux kernel is ~40% on x86_64. The overhead comes almost
completely from TLB flushing. If we can live with stale TLB entries
allowing temporary access (which I think is reasonable), we can remove
all TLB flushing (on x86). This reduces the overhead to 2-3% for
There were no problems in forward-porting the patch set to master.
You can find the result here, including a patch makes the TLB flushing
It survived some casual stress-ng runs. I can rerun the benchmarks on
this version, but I doubt there is any change.
> It used to be just 500 LOC. Was that because they took horrible
The patch is still fairly small. As for the horrible shortcuts, I let
others comment on that.
 Measured on my quad-core (8 hyperthreads) Kaby Lake desktop building
Linux 4.18 with the Phoronix Test Suite.
Amazon Development Center Germany GmbH
Berlin - Dresden - Aachen
main office: Krausenstr. 38, 10117 Berlin
Geschaeftsfuehrer: Dr. Ralf Herbrich, Christian Schlaeger
Eingetragen am Amtsgericht Charlottenburg HRB 149173 B