{"id":115180,"date":"2024-04-19T14:30:12","date_gmt":"2024-04-19T12:30:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dlya-xen-razvivaetsya-mehanizm-paravirtualizaczii-iommu"},"modified":"2024-04-19T14:30:12","modified_gmt":"2024-04-19T12:30:12","slug":"dlya-xen-razvivaetsya-mehanizm-paravirtualizaczii-iommu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/dlya-xen-razvivaetsya-mehanizm-paravirtualizaczii-iommu","title":{"rendered":"Un m\u00e9canisme de paravirtualisation IOMMU est en d\u00e9veloppement pour Xen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les d\u00e9veloppeurs du projet XCP-NG, qui d\u00e9veloppe une plateforme libre pour le d\u00e9ploiement et la gestion d'infrastructures cloud, ont pr\u00e9sent\u00e9 le projet PV-IOMMU, permettant aux syst\u00e8mes invit\u00e9s d'acc\u00e9der \u00e0 une fonctionnalit\u00e9 IOMMU limit\u00e9e, r\u00e9alis\u00e9e \u00e0 l'aide de l'infrastructure de paravirtualisation Xen. En pratique, PV-IOMMU peut \u00eatre utilis\u00e9 pour mettre en \u0153uvre une protection DMA dans Dom0 ou assurer le support du sous-syst\u00e8me noyau Linux VFIO. Auparavant, l'hyperviseur Xen utilisait l'IOMMU pour transmettre l'acc\u00e8s aux p\u00e9riph\u00e9riques PCI et limiter l'acc\u00e8s des dispositifs \u00e0 la m\u00e9moire, mais pour des raisons de stabilit\u00e9 et de s\u00e9curit\u00e9, les syst\u00e8mes invit\u00e9s ne pouvaient pas acc\u00e9der directement au bloc IOMMU fourni par le mat\u00e9riel. <\/p>\n

L'IOMMU est un contr\u00f4leur de m\u00e9moire sp\u00e9cialis\u00e9 qui r\u00e9alise la traduction des adresses virtuelles visibles par le mat\u00e9riel en adresses physiques. Cela permet d'effectuer et de filtrer les op\u00e9rations DMA sur des adresses virtuelles, ainsi que de restreindre et d'isoler les op\u00e9rations d'entr\u00e9e-sortie. Dans le contexte de la virtualisation, l'IOMMU permet aux syst\u00e8mes invit\u00e9s d'acc\u00e9der directement aux p\u00e9riph\u00e9riques, tels que les adaptateurs Ethernet, les cartes graphiques et les contr\u00f4leurs de stockage. L'impl\u00e9mentation de l'IOMMU par Intel est connue sous le nom de VT-d (\u00ab Virtualization Technology for Directed I\/O \u00bb), celle d'AMD sous le nom d'AMD-Vi (I\/O Virtualization), et celle d'ARM sous le nom de SMMU (System Memory Management Unit). <\/p>\n

La mise en \u0153uvre paravirtualis\u00e9e propos\u00e9e (PV-IOMMU) permet aux syst\u00e8mes invit\u00e9s d'utiliser les fonctionnalit\u00e9s de base de l'IOMMU, tout en abstraisant les d\u00e9tails mat\u00e9riels de bas niveau. Pour l'inclure dans Xen, un nouvel hyperappel (analogique aux appels syst\u00e8me pour les hyperviseurs) HYPERVISOR_iommu_op a \u00e9t\u00e9 propos\u00e9, que les syst\u00e8mes invit\u00e9s peuvent utiliser pour effectuer des op\u00e9rations IOMMU. Entre autres choses, les syst\u00e8mes invit\u00e9s peuvent d\u00e9sormais cr\u00e9er et modifier domaines<\/a> Les domaines IOMMU (IOMMU domain), appel\u00e9s dans Xen contextes IOMMU (IOMMU context) pour \u00e9viter la confusion avec le terme \u00ab domaine \u00bb dans Xen. Les contextes IOMMU organisent l'acc\u00e8s de la machine virtuelle \u00e0 la m\u00e9moire des p\u00e9riph\u00e9riques et d\u00e9finissent les op\u00e9rations de traduction de m\u00e9moire appliqu\u00e9es \u00e0 un ou plusieurs p\u00e9riph\u00e9riques. <\/p>\n

\u00c0 ce stade du d\u00e9veloppement, PV-IOMMU ne supporte que la technologie Intel VT-d, mais le support d'AMD-Vi et de SMMUv3 est pr\u00e9vu prochainement.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 XCP-NG, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 PV-IOMMU, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IOMMU, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Xen. \u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 PV-IOMMU \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b DMA \u0432 Dom0 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 Linux VFIO. \u0420\u0430\u043d\u0435\u0435 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Xen \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b IOMMU \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115180","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Un m\u00e9canisme de paravirtualisation IOMMU est en d\u00e9veloppement pour Xen | ProHoster","description":"Les d\u00e9veloppeurs du projet XCP-NG, qui d\u00e9veloppe une plateforme libre pour le d\u00e9ploiement et la gestion des infrastructures cloud, ont pr\u00e9sent\u00e9 le projet PV-IOMMU, permettant aux syst\u00e8mes invit\u00e9s d'acc\u00e9der de mani\u00e8re restreinte.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/dlya-xen-razvivaetsya-mehanizm-paravirtualizaczii-iommu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043b\u044f Xen \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 IOMMU | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 XCP-NG, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 PV-IOMMU, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/dlya-xen-razvivaetsya-mehanizm-paravirtualizaczii-iommu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-19T12:30:12+00:00","article:modified_time":"2024-04-19T12:30:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115180","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 22:40:19","updated":"2026-03-05 11:13:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/115180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=115180"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/115180\/revisions"}],"predecessor-version":[{"id":163162,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/115180\/revisions\/163162"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=115180"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=115180"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=115180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}