Re: [Xen-devel] Move some of the PCI device manage/control into pciback?

[Keir Fraser <keir.fraser@xxxxxxxxxxxxx>]

On 19/01/2009 07:05, "Shohei Fujiwara" <fujiwara-sxa@xxxxxxxxxxxxxxx> wrote:

>> I still don't understand what you're trying to achieve by avoiding to
>> go through pciback.  As Keir said, PCI config accesses should not be
>> taken on the data path.  Config accesses should neither be required
>> for regular device operation.  It is afterall called "configuration
>> space", not "control space".  PCI config space acesses are kind of
>> bound to have some overhead.  For example, Itanium requires them to go
>> through a SAL call.
> 
> Domain 0 is SPOF(Single Point of Failure). If domain 0 panics, whole
> system stops. So, I'd like to remove the function from domain 0, if we
> can keep security. This reduces possibility of panic of domain 0.
> 
> In the future, it is great if domain 0 can reboot while guest domain
> are working. This avoids SPOF.
> To achieve this, we have to solve many problems. In case
> of network, emulating link down during rebooting is needed. In case of
> PCI passthrough, it is difficult to block configuration access during
> rebooting. If stub domain can access to configuration space directly,
> we don't need to block configuration access.
> 
> What do you think?

I think what you want to do sounds pretty hard. PCI accesses should
definitely go through pciback by default. If you need other modes for more
extensive rearchitecting you are doing, they belong in your dom0-can-reboot
branch, or in the main tree as a configurable option.

 -- Keir



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel