{"id":31672,"date":"2019-10-31T21:42:29","date_gmt":"2019-10-31T18:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm\/"},"modified":"2019-10-31T21:42:29","modified_gmt":"2019-10-31T18:42:29","slug":"proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","title":{"rendered":"NetBSD projekt arendab uut NVMM h\u00fcperviisorit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

NetBSD projekti arendajad et neil on alles ainult kaks plokki \/8.<\/a><\/noindex> uue h\u00fcpervisori ja sellega seotud virtualiseerimistehnoloogia loomine, mis on juba kaasatud NetBSD currenti eksperimentaalsesse haru ja pakutakse NetBSD 9 stabiilses versioonis. NVMM toetab praegu ainult x86_64 arhitektuuri ja pakub kahte tagapaneeli riistvaraliselt toetatud virtualiseerimise mehhanismide kasutamiseks: x86-SVM, mis toetab AMD CPU virtualiseerimise laiendusi, ja x86-VMX Intel CPU jaoks. Praeguses vormis on v\u00f5imalik \u00fche hosti peal k\u00e4itada kuni 128 virtuaalmasinat, millest iga\u00fchele v\u00f5ib eraldada kuni 256 virtuaalset protsessorituuma (VCPU) ja 128 GB RAM-i. <\/p>\n

NVMM sisaldab draiverit, mis t\u00f6\u00f6tab s\u00fcsteemi tuumas ja koordineerib juurdep\u00e4\u00e4su riistvaralistele virtualiseerimise mehhanismidele, ning Libnvmm-i kihti, mis t\u00f6\u00f6tab kasutajaruumi. Tuuma ja kasutajaruumi komponentide vahel toimub suhtlus l\u00e4bi IOCTL-i. NVMM omadus, mis eristab seda h\u00fcpervisoritest nagu KVM, HAXM<\/a><\/noindex> ja Bhyve, seisneb selles, et tuuma tasandil t\u00e4idetakse ainult minimaalne vajalike riistvaraseoste komplekt, samas kui kogu seadme emuleerimise kood on viidud tuumast kasutajaruumi. Selline l\u00e4henemine v\u00e4hendab k\u00f5rgendatud \u00f5igustega k\u00e4ideldava koodi mahtu ja minimeerib kogu s\u00fcsteemi kompromiteerimise ohtu h\u00fcpervisori haavatavuste r\u00fcnnakute korral. Samuti muudab see projekti silumise ja fuzzing-testimise oluliselt lihtsamaks. <\/p>\n

Seega Libnvmm iseenesest ei sisalda emulaatori funktsiooni, vaid pakub API-d, mis v\u00f5imaldab integreerida NVMM-i toe olemasolevatesse emulaatoritesse, n\u00e4iteks QEMU-sse. API h\u00f5lmab selliseid funktsioone nagu virtuaalmasina loomine ja k\u00e4ivitamine, m\u00e4lu eraldamine k\u00fclgs\u00fcsteemile ja VCPU jaotamine. Turvalisuse suurendamiseks ja v\u00f5imalike r\u00fcnnakuvektorite v\u00e4hendamiseks pakub libnvmm ainult selgelt n\u00f5utud funktsioone \u2014 vaikimisi keerulisi t\u00f6\u00f6tlejaid ei kutsuta automaatselt v\u00e4lja ja neid ei pruugi \u00fcldse rakendada, kui ilma nendeta suudetakse hakkama saada. NVMM p\u00fc\u00fcab kasutada lihtsaid lahendusi, v\u00e4ltides keerukusi ja v\u00f5imaldades kontrollida v\u00f5imalikult paljusid t\u00f6\u00f6 aspekte.<\/p>\n

\"NetBSD<\/a><\/noindex><\/center><\/p>\n

NVMM, mis t\u00f6\u00f6tab s\u00fcdametasemel, on tihedalt integreeritud NetBSD tuumaga ning v\u00f5imaldab saavutada j\u00f5udluse kasvu, v\u00e4hendades konteksti vahetusi k\u00fclalis-OS-i ja host-keskkonna vahel. Kasutajaruumi poolel p\u00fc\u00fcab libnvmm koguda t\u00fc\u00fcpilisi I\/O tehteid ja mitte p\u00f6\u00f6rduda s\u00fcsteemi k\u00f5nede poole ilma vajaduseta. M\u00e4luhalduss\u00fcsteem p\u00f5hineb pmap-alams\u00fcsteemil, mis v\u00f5imaldab k\u00fclalis\u00fcsteemide m\u00e4lulehek\u00fclgede v\u00e4lja t\u00f5ukamist vahetusfaili, kui s\u00fcsteemis on m\u00e4lust puudu. NVMM on vaba globaalsetest lukustustest ja h\u00e4sti skaleeritav, v\u00f5imaldades erinevate CPU tuumade kasutamist samaaegselt erinevate k\u00fclalisvirtuaalmasinate k\u00e4itamiseks. <\/p>\n

QEMU alusel on v\u00e4lja t\u00f6\u00f6tatud lahendus, mis kasutab NVMM-i riistvaraliste virtualiseerimise mehhanismide aktiveerimiseks. T\u00f6\u00f6 k\u00e4ib ettevalmistatud plaastrite lisamise nimel QEMU p\u00f5hikoostisse. QEMU+NVMM sidumine suudab kaugelt sulgeda vahekaarte, mis on avatud teistel seadmetel.<\/a><\/noindex> edukalt k\u00e4ivitada k\u00fclalis\u00fcsteeme nagu FreeBSD, OpenBSD, Linux, Windows XP\/7\/8.1\/10 ja teisi OS-e x86_64 s\u00fcsteemides AMD ja Intel protsessoritega (ise NVMM ei ole seotud konkreetse arhitektuuriga, n\u00e4iteks suudab see vastava tagapinna loomisel t\u00f6\u00f6tada ARM64 s\u00fcsteemides). NVMM-i edasised rakendusalad h\u00f5lmavad ka sandbox-isolatsiooni eraldi rakendustele.<\/p>\n

\"NetBSD<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 NetBSD-current \u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 NetBSD 9. NVMM \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86_64 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u0431\u044d\u043a\u0435\u043d\u0434\u0430 \u0434\u043b\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438: x86-SVM \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CPU AMD \u0438 x86-VMX \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23579,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31672","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NetBSD projekt arendab uut h\u00fcperviisorit NVMM | ProHoster","description":"NetBSD projekti arendajad on kuulutanud v\u00e4lja uue h\u00fcperviisori ja sellega seotud virtualiseerimise steki, mis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 NetBSD \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 NVMM | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:29+00:00","article:modified_time":"2019-10-31T18:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31672","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:16:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:12:34","updated":"2026-01-21 07:16:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31672"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31672\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23579"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}