{"id":106135,"date":"2022-12-17T15:36:38","date_gmt":"2022-12-17T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-gipervizora-xen-4-17"},"modified":"2022-12-17T15:36:38","modified_gmt":"2022-12-17T13:36:38","slug":"vypusk-gipervizora-xen-4-17","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-gipervizora-xen-4-17","title":{"rendered":"Lan\u00e7amento do hypervisor Xen 4.17","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ap\u00f3s um ano de desenvolvimento, foi lan\u00e7ado o hypervisor livre Xen 4.17. Empresas como Amazon, Arm, Bitdefender, Citrix, EPAM Systems e Xilinx (AMD) participaram do desenvolvimento da nova vers\u00e3o. A forma\u00e7\u00e3o de atualiza\u00e7\u00f5es para a ramifica\u00e7\u00e3o Xen 4.17 continuar\u00e1 at\u00e9 12 de junho de 2024, e a publica\u00e7\u00e3o de corre\u00e7\u00f5es de vulnerabilidades at\u00e9 12 de dezembro de 2025.      <\/p>\n<p>Principais mudan\u00e7as no Xen 4.17:   <\/p>\n<ul>\n<li class=\"l\"> Foi garantida conformidade parcial com os requisitos de desenvolvimento de software seguro e confi\u00e1vel na linguagem C, conforme especifica\u00e7\u00f5es MISRA-C, que s\u00e3o aplicadas na cria\u00e7\u00e3o de sistemas cr\u00edticos. Quatro diretrizes e 24 regras MISRA-C (de 143 regras e 16 diretrizes) foram oficialmente implementadas no Xen, al\u00e9m da integra\u00e7\u00e3o no processo de constru\u00e7\u00e3o do analisador est\u00e1tico MISRA-C, que verifica o cumprimento dos requisitos da especifica\u00e7\u00e3o.\n<li class=\"l\"> Foi disponibilizada a possibilidade de definir uma configura\u00e7\u00e3o est\u00e1tica do Xen para sistemas ARM, que determina rigidamente todos os recursos necess\u00e1rios para inicializar os sistemas convidados. Todos os recursos, como mem\u00f3ria compartilhada, canais de notifica\u00e7\u00e3o de eventos e espa\u00e7o na pilha do hypervisor, s\u00e3o alocados previamente durante a inicializa\u00e7\u00e3o do hypervisor, em vez de serem alocados dinamicamente, eliminando poss\u00edveis falhas devido \u00e0 falta de recursos durante a opera\u00e7\u00e3o.\n<li class=\"l\"> Para sistemas embarcados baseados na arquitetura ARM, foi implementado um suporte experimental (tech preview) \u00e0 virtualiza\u00e7\u00e3o de entrada\/sa\u00edda utilizando protocolos VirtIO. O transporte virtio-mmio foi empregado para a troca de dados com o dispositivo virtual de entrada\/sa\u00edda, garantindo compatibilidade com uma ampla gama de dispositivos VirtIO. Foi implementado suporte para front-end para Linux, ferramentas (libxl\/xl), modo dom0less e backends executados no espa\u00e7o do usu\u00e1rio (foram testados os backends virtio-disk, virtio-net, i2c e gpio).\n<li class=\"l\"> Melhorou-se o suporte ao modo dom0less, permitindo operar sem a necessidade de implantar um ambiente dom0 durante a inicializa\u00e7\u00e3o <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/vps\/\"   title=\"m\u00e1quinas virtuais\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2131\">m\u00e1quinas virtuais<\/a> Na fase inicial de carregamento do servidor. Foi adicionada a possibilidade de definir pools de CPU (CPUPOOL) durante o carregamento (atrav\u00e9s da \u00e1rvore de dispositivos), permitindo o uso de pools em configura\u00e7\u00f5es sem dom0, por exemplo, para vincular diferentes tipos de n\u00facleos de CPU em sistemas ARM baseados na arquitetura big.LITTLE, que combinam em um \u00fanico chip n\u00facleos poderosos, por\u00e9m de alto consumo energ\u00e9tico, e n\u00facleos menos potentes, mas mais eficientes em termos de energia. Al\u00e9m disso, no dom0less, foi possibilitada a vincula\u00e7\u00e3o do frontend\/backend de paravirtualiza\u00e7\u00e3o aos sistemas convidados, permitindo o carregamento de sistemas convidados com dispositivos paravirtualizados necess\u00e1rios.\n<li class=\"l\"> Em sistemas ARM, as estruturas de virtualiza\u00e7\u00e3o de mem\u00f3ria (P2M, Physical to Machine) agora s\u00e3o alocadas a partir do pool de mem\u00f3ria formado na cria\u00e7\u00e3o do dom\u00ednio, o que possibilita aumentar a efici\u00eancia da isolamento entre sistemas convidados em caso de falhas relacionadas \u00e0 mem\u00f3ria.\n<li class=\"l\"> Para sistemas ARM, foi adicionada prote\u00e7\u00e3o contra a vulnerabilidade Spectre-BHB nas estruturas microarquitet\u00f4nicas dos processadores.\n<li class=\"l\"> Em sistemas ARM, foi possibilitado o in\u00edcio do sistema operacional Zephyr no ambiente root do Dom0.\n<li class=\"l\"> Foi viabilizada a compila\u00e7\u00e3o separada (out-of-tree) do hipervisor.\n<li class=\"l\"> Em sistemas x86, foi assegurado o suporte a grandes p\u00e1ginas IOMMU (superpage) para todos os tipos de sistemas convidados, o que aumenta a largura de banda ao passar dispositivos PCI. Foi adicionado suporte a hosts equipados com at\u00e9 12 TB de RAM. Na fase de carregamento, foi implementada a capacidade de definir par\u00e2metros cpuid para dom0. Para gerenciar medidas de prote\u00e7\u00e3o contra ataques ao CPU nos sistemas convidados implementados ao n\u00edvel do hipervisor, foram propostos par\u00e2metros VIRT_SSBD e MSR_SPEC_CTRL.\n<li class=\"l\"> Separadamente, est\u00e1 sendo desenvolvido o transporte VirtIO-Grant, que se diferencia do VirtIO-MMIO por um n\u00edvel mais elevado de seguran\u00e7a e pela capacidade de executar manipuladores em um dom\u00ednio isolado separado para drivers. No VirtIO-Grant, em vez do mapeamento direto da mem\u00f3ria, \u00e9 utilizada a tradu\u00e7\u00e3o de endere\u00e7os f\u00edsicos do sistema convidado em refer\u00eancias de concess\u00e3o, o que permite o uso de \u00e1reas de mem\u00f3ria compartilhada previamente acordadas para troca de dados entre o sistema convidado e o backend VirtIO, sem conceder ao backend permiss\u00f5es para mapeamento de mem\u00f3ria. O suporte ao VirtIO-Grant j\u00e1 est\u00e1 implementado no kernel Linux, mas ainda n\u00e3o foi inclu\u00eddo nos backends QEMU, em virtio-vhost e nas ferramentas (libxl\/xl).\n<li class=\"l\"> O desenvolvimento da iniciativa Hyperlaunch continua, visando fornecer ferramentas flex\u00edveis para a configura\u00e7\u00e3o do lan\u00e7amento de m\u00e1quinas virtuais durante a inicializa\u00e7\u00e3o do sistema. J\u00e1 est\u00e1 pronto o primeiro conjunto de patches que permitem a identifica\u00e7\u00e3o de dom\u00ednios PV e a transmiss\u00e3o de suas imagens ao hipervisor durante a inicializa\u00e7\u00e3o. Tamb\u00e9m foi implementado tudo o que \u00e9 necess\u00e1rio para a inicializa\u00e7\u00e3o de tais paravirtualizados. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/domain\/\"   title=\"dom\u00ednios\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3179\">dom\u00ednios<\/a>, incluindo os componentes Xenstore para drivers PV. Ap\u00f3s a aceita\u00e7\u00e3o dos patches, come\u00e7ar\u00e1 o trabalho para incluir suporte a dispositivos PVH e HVM, bem como a implementa\u00e7\u00e3o de um dom\u00ednio separado domB (dom\u00ednio de constru\u00e7\u00e3o), adequado para organizar a inicializa\u00e7\u00e3o mensurada (measured boot), comprovando a integridade de todos os componentes carregados.\n<li class=\"l\"> Continuam os trabalhos na cria\u00e7\u00e3o do porta Xen para a arquitetura RISC-V.  <\/ul>\n<p>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58340\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD). \u0424\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 Xen 4.17 \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e 12 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e 12 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Xen 4.17: \u041e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u043e \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106135","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-gipervizora-xen-4-17\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-gipervizora-xen-4-17\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-12-17T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-12-17T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7amento do hipervisor Xen 4.17 | ProHoster","description":"Ap\u00f3s um ano de desenvolvimento, foi lan\u00e7ado o hipervisor livre Xen 4.17. No desenvolvimento desta nova vers\u00e3o, participaram empresas como Amazon, Arm, Bitdefender, Citrix, EPAM Systems e Xilinx (AMD).","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-gipervizora-xen-4-17","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD).","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-gipervizora-xen-4-17","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-17T13:36:38+00:00","article:modified_time":"2022-12-17T13:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"106135","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 17:11:32","updated":"2026-02-11 11:12:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/106135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=106135"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/106135\/revisions"}],"predecessor-version":[{"id":160572,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/106135\/revisions\/160572"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=106135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=106135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=106135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}