{"id":31672,"date":"2019-10-31T21:42:29","date_gmt":"2019-10-31T18:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm\/"},"modified":"2019-10-31T21:42:29","modified_gmt":"2019-10-31T18:42:29","slug":"proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","title":{"rendered":"Proiectul NetBSD dezvolt\u0103 un nou hypervizor NVMM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezvoltatorii proiectului NetBSD au anun\u021bat<\/a><\/noindex> despre crearea unui nou hypervisor \u0219i a stivei de virtualizare asociate, care sunt deja incluse \u00een ramura experimental\u0103 NetBSD-current \u0219i vor fi oferite \u00een versiunile stabile NetBSD 9. NVMM este \u00een prezent limitat la suportul arhitecturii x86_64 \u0219i ofer\u0103 dou\u0103 backend-uri pentru utilizarea mecanismelor hardware de virtualizare: x86-SVM cu suport pentru extensiile de virtualizare CPU AMD \u0219i x86-VMX pentru CPU Intel. \u00cen forma sa actual\u0103, este posibil s\u0103 rula\u021bi p\u00e2n\u0103 la 128 de ma\u0219ini virtuale pe un singur host, fiecare dintre ele put\u00e2nd fi alocat\u0103 p\u00e2n\u0103 la 256 de nuclee virtuale de procesor (VCPU) \u0219i 128 GB RAM. <\/p>\n

NVMM include un driver care func\u021bioneaz\u0103 la nivelul nucleului sistemului \u0219i coordoneaz\u0103 accesul la mecanismele hardware de virtualizare, precum \u0219i la stiva Libnvmm, care ruleaz\u0103 \u00een spa\u021biul utilizatorului. Interac\u021biunea dintre componentele nucleului \u0219i spa\u021biul utilizatorului se realizeaz\u0103 prin IOCTL. O caracteristic\u0103 a NVMM, care \u00eel diferen\u021biaz\u0103 de hypervisoare precum KVM, HAXM<\/a><\/noindex> \u0219i Bhyve, este c\u0103 la nivelul nucleului se execut\u0103 doar setul minim necesar de wrapperi \u00een jurul mecanismelor hardware de virtualizare, iar tot codul de emulare a echipamentului este mutat din nucleu \u00een spa\u021biul utilizatorului. Aceast\u0103 abordare reduce volumul de cod care ruleaz\u0103 cu privilegii crescute \u0219i minimizeaz\u0103 riscul compromiterii \u00eentregului sistem \u00een cazul atacurilor asupra vulnerabilit\u0103\u021bilor din hypervisor. \u00cen plus, se simplific\u0103 semnificativ depanarea \u0219i testarea fuzzing a proiectului. <\/p>\n

Libnvmm, \u00een sine, nu con\u021bine func\u021bii de emulator, ci doar ofer\u0103 un API care permite integrarea suportului NVMM \u00een emulatorii existen\u021bi, cum ar fi QEMU. API-ul acoper\u0103 func\u021bii precum crearea \u0219i lansarea unei ma\u0219ini virtuale, alocarea memoriei pentru sistemul oaspete \u0219i distribuirea VCPU-urilor. Pentru a \u00eembun\u0103t\u0103\u021bi securitatea \u0219i a reduce vectorii de atac posibili, libnvmm ofer\u0103 doar func\u021biile explicit solicitate \u2014 prin default, manipul\u0103rile complexe nu sunt apelate automat \u0219i pot s\u0103 nu fie utilizate deloc dac\u0103 se poate trece f\u0103r\u0103 ele. NVMM \u00eencearc\u0103 s\u0103 utilizeze solu\u021bii simple, evit\u00e2nd complicarea, \u0219i permite controlul asupra c\u00e2t mai multor aspecte ale func\u021bion\u0103rii.<\/p>\n

\"Proiectul<\/a><\/noindex><\/center><\/p>\n

Partea NVMM, care func\u021bioneaz\u0103 la nivel de nucleu, este integrat\u0103 str\u00e2ns cu nucleul NetBSD \u0219i permite cre\u0219terea performan\u021bei prin reducerea num\u0103rului de comut\u0103ri de context \u00eentre sistemul de operare gazd\u0103 \u0219i cel virtual. Pe partea utilizatorului, libnvmm \u00eencearc\u0103 s\u0103 agregheze opera\u021biunile tipice de intrare-ie\u0219ire \u0219i s\u0103 evite apelurile sistemului, atunci c\u00e2nd nu este necesar. Sistemul de gestionare a memoriei se bazeaz\u0103 pe subsistemul pmap, ceea ce permite \u00eenlocuirea paginilor de memorie ale sistemelor gazd\u0103 \u00een spa\u021biul de swap \u00een cazul lipsei de memorie \u00een sistem. NVMM nu are bloc\u0103ri globale \u0219i se scaleaz\u0103 bine, permi\u021b\u00e2nd utilizarea simultan\u0103 a nucleelor CPU diferite pentru executarea diferitelor ma\u0219ini virtuale gazd\u0103. <\/p>\n

Pe baza QEMU, a fost preg\u0103tit\u0103 o solu\u021bie care folose\u0219te NVMM pentru a activa mecanismele hardware de virtualizare. Se lucreaz\u0103 la includerea patch-urilor preg\u0103tite \u00een compunerea de baz\u0103 a QEMU. Leg\u0103tura QEMU+NVMM deja permite<\/a><\/noindex> ruleaz\u0103 cu succes sisteme gazd\u0103 precum FreeBSD, OpenBSD, Linux, Windows XP\/7\/8.1\/10 \u0219i alte sisteme pe ma\u0219inile x86_64 cu procesoare AMD \u0219i Intel (NVMM nu este legat de o arhitectur\u0103 specific\u0103, de exemplu, prin crearea unui backend corespunz\u0103tor poate func\u021biona pe sisteme ARM64). Din domeniile aplic\u0103rii ulterioare, NVMM se remarc\u0103 de asemenea prin izolarea sandbox a aplica\u021biilor individuale.<\/p>\n

\"Proiectul<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 NetBSD-current \u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 NetBSD 9. NVMM \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86_64 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u0431\u044d\u043a\u0435\u043d\u0434\u0430 \u0434\u043b\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438: x86-SVM \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CPU AMD \u0438 x86-VMX \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23579,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31672","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Proiectul NetBSD dezvolt\u0103 un nou hypervisor NVMM | ProHoster","description":"Dezvoltatorii proiectului NetBSD au anun\u021bat crearea unui nou hypervisor \u0219i a unei stive de virtualizare asociate, care.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 NetBSD \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 NVMM | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:29+00:00","article:modified_time":"2019-10-31T18:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31672","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:16:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:12:34","updated":"2026-01-21 07:16:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31672"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31672\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23579"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}