[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] Can I expose a pci device to HVM domU?

> > Can i assign a PCI device(e.g a NIC) exclusively to a Linux HVM
> > domainU after hiding it from domain 0?
> >
> > I know that only PV guests are the best candidates for this but I
> > still want to ask, hoping someone might have done some work in latest
> > xen-unstable.
> >
> > Is there any known way to do this?
> >
> > PS:- NIC Is does not have Intel's VT-d.
> If the Guest is HVM, how would it know how to give usable
> DMA addresses to the NIC? (Whether it should be trusted to
> in the absence of an Address Translation Service is the next
> question, but first is whether it could even do it at all).
> A PV Guest, by contrast, would know the distinction between
> GPAs and SPAs (not that it makes it any more trustworthy).

Guys from Neocleus (I think) have been working on making PCI passthrough to 
HVM guests happen, without using an IOMMU.  There is code out there that 
these guys have released.  It's a clever bit of lateral thinking that makes 
this possible :-)

However, doing this without an IOMMU still doesn't address the security 
concerns and I'm not sure if it scales to many (or even if they support more 
than one) HVM guests controlling PCI devices.


Push Me Pull You - Distributed SCM tool (http://www.cl.cam.ac.uk/~maw48/pmpu/)

Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.