ืึธืจืึทืงืœืข ืจื™ืœื™ืกื™ื– ื•ื ื‘ืจืขืึทืงืึทื‘ืœืข ืขื ื˜ืขืจืคึผืจื™ื™ื– ืงืขืจื ืขืœ 6

ืึธืจืึทืงืœืข ืคึฟื™ืจืžืข ื“ืขืจืœืื ื’ื˜ ืขืจืฉื˜ืขืจ ืกื˜ืึทื‘ื™ืœ ืžืขืœื“ื•ื ื’ ื•ื ื‘ืจืขืึทืงืึทื‘ืœืข ืขื ื˜ืขืจืคึผืจื™ื™ื– ืงืขืจื ืขืœ 6 (UEK R6), ืึทืŸ ืขืงืกื˜ืขื ื“ืขื“ ื‘ื•ื™ืขืŸ ืคื•ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ, ืคึผืึทื–ื™ืฉืึทื ื“ ืคึฟืึทืจ ื ื•ืฆืŸ ืื™ืŸ ื“ื™ Oracle Linux ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื•ื•ื™ ืึทืŸ ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ืฆื• ื“ื™ ื ืึธืจืžืึทืœ ืงืขืจืŸ ืคึผืขืงืœ ืคื•ืŸ Red Hat Enterprise Linux. ื“ืขืจ ืงืขืจืŸ ืื™ื– ื‘ืœื•ื™ื– ื‘ื ื™ืžืฆื ืคึฟืึทืจ x86_64 ืื•ืŸ ARM64 (aarch64) ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจื–. ืงืขืจื ืขืœ ืงื•ื•ืืœืŸ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื‘ืจื™ื™ืงื“ืึทื•ืŸ ืื™ืŸ ื™ื—ื™ื“ ืคึผืึทื˜ืฉืึทื–, ืืจื•ื™ืก ืื™ืŸ ื“ื™ ืึธืจืึทืงืœืข ืฆื™ื‘ื•ืจ ื’ื™ื˜ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™.

ื“ื™ Unbreakable Enterprise Kernel 6 ืคึผืขืงืœ ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืงืขืจืŸ Linux 5.4 (UEK R5 ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืงืขืจืŸ 4.14), ื•ื•ืึธืก ืื™ื– ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืžื™ื˜ ื ื™ื™ึทืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ, ืึธืคึผื˜ื™ืžื™ื–ืึทื˜ื™ืึธื ืก ืื•ืŸ ืคื™ืงืกื™ื–, ืื•ืŸ ืื™ื– ืื•ื™ืš ื˜ืขืกื˜ืขื“ ืคึฟืึทืจ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ ืจื•ื‘ึฟ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคืœื™ืกื ื“ื™ืง ืื•ื™ืฃ RHEL, ืื•ืŸ ืื™ื– ืกืคึผืึทืกื™ืคื™ืงืœื™ ืึธืคึผื˜ื™ืžื™ื–ืขื“ ืฆื• ืึทืจื‘ืขื˜ืŸ ืžื™ื˜ ื™ื ื“ืึทืกื˜ืจื™ืึทืœ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื•ืŸ ืึธืจืึทืงืœืข ื™ื™ึทื–ื ื•ื•ืึทืจื’. ื™ื ืกื˜ืึทืœื™ืจื•ื ื’ ืื•ืŸ src ืคึผืึทืงืึทื“ื–ืฉืึทื– ืžื™ื˜ ื“ื™ UEK R6 ืงืขืจืŸ ื–ืขื ืขืŸ ืฆื•ื’ืขื’ืจื™ื™ื˜ ืคึฟืึทืจ Oracle Linux ืงืกื ื•ืžืงืก.ืงืก ะธ ืงืกื ื•ืžืงืก.ืงืก. ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ 6.x ืฆื•ื•ื™ื™ึทื’ ืื™ื– ื“ื™ืกืงืึทื ื˜ื™ื ื™ื•ื“; ืฆื• ื ื•ืฆืŸ UEK R6, ืื™ืจ ืžื•ื–ืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื“ื™ ืกื™ืกื˜ืขื ืฆื• Oracle Linux 7 (ืขืก ื–ืขื ืขืŸ ืงื™ื™ืŸ ืžื ื™ืขื•ืช ืฆื• ื ื•ืฆืŸ ื“ืขื ืงืขืจืŸ ืื™ืŸ ืขื ืœืขืš ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ RHEL, CentOS ืื•ืŸ Scientific Linux).

ืฉืœื™ืกืœ ื™ื ืึธื•ื•ื•ื™ื™ืฉืึทื ื– ืึทื ื‘ืจื™ื™ืงืึทื‘ืึทืœ ืขื ื˜ืขืจืคึผืจื™ื™ื– ืงืขืจื ืขืœ 6:

  • ื™ืงืกืคึผืึทื ื“ื™ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืกื™ืกื˜ืขืžืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ 64-ื‘ื™ืกืœ ARM ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ (aarch64).
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืึทืœืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ Cgroup v2 ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“.
  • ื“ื™ ืงื˜ืึทืกืง ืคืจื™ื™ืžื•ื•ืขืจืง ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืฆื• ืคึผืึทืจืึทืœืขืœื™ื–ื™ืจืŸ ื˜ืึทืกืงืก ืื™ืŸ ื“ื™ ืงืขืจืŸ ื•ื•ืึธืก ืคืึทืจื ื•ืฆืŸ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืงืคึผื• ืจืขืกื•ืจืกืŸ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื ื™ืฆืŸ ืงื˜ืึทืกืง, ืคึผืึทืจืึทืœืขืœื™ื–ืึทื˜ื™ืึธืŸ ืคื•ืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืฆื• ื•ื™ืกืžืขืงืŸ ืจื™ื™ื ื“ื–ืฉืึทื– ืคื•ืŸ ื–ื›ึผืจื•ืŸ ื‘ืœืขื˜ืขืจ ืึธื“ืขืจ ืคึผืจืึธืฆืขืก ืึท ืจืฉื™ืžื” ืคื•ืŸ ื™ื ืึธื“ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืึธืจื’ืึทื ื™ื–ื™ืจื˜;
  • ื ืคึผืึทืจืึทืœืขืœื™ื–ืขื“ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ืงืกื•ื•ืึทืคึผื“ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืฆื• ืคึผืจืึธืฆืขืก ื–ื™ืงืึธืจืŸ ื‘ืœืึทื˜ ืกื•ื•ืึทืคึผืก ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืกืœื™, ืจื™ื“ื•ืกื™ื ื’ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ืจืขืงื˜ (ืกื™ื ื˜ืฉืจืึธื ืึธื•ืก) ืกื•ื•ืึทืคึผืก. ื•ื•ื™ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืคืจื™ื™ ื–ื›ึผืจื•ืŸ ื‘ืœืขื˜ืขืจ ื“ื™ืงืจื™ืกืึทื–, kswapd ืคึผืขืจืคืึธืจืžื– ืึท ื™ื‘ืขืจืงื•ืงืŸ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืึทื ื™ื•ื–ื“ ื‘ืœืขื˜ืขืจ ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืจื™ื™.
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื•ื•ืขืจืึทืคื™ื™ื™ื ื’ ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืคื•ืŸ ื“ื™ ืงืขืจืŸ ื‘ื™ืœื“ ืื•ืŸ ืคื™ืจืžื•ื•ืึทืจืข ื ื™ืฆืŸ ืึท ื“ื™ื’ื™ื˜ืึทืœ ื›ืกื™ืžืข ื•ื•ืขืŸ ืœืึธื•ื“ื™ื ื’ ื“ื™ ืงืขืจืŸ ืžื™ื˜ ื“ื™ ืงืขืงืกืขืง ืžืขืงืึทื ื™ื–ืึทื (ืœืึธื•ื“ื™ื ื’ ื“ื™ ืงืขืจืŸ ืคึฟื•ืŸ ืึท ืฉื•ื™ืŸ ืœืึธื•ื“ื™ื“ ืกื™ืกื˜ืขื).
  • ื“ื™ ืคืึธืจืฉื˜ืขืœื•ื ื’ ืคื•ืŸ ื“ื™ ื•ื•ื™ืจื˜ื•ืึทืœ ื–ื™ืงืึธืจืŸ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกื™ืกื˜ืขื ืื™ื– ืึธืคึผื˜ื™ืžื™ื–ืขื“, ื“ื™ ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜ ืคื•ืŸ ืงืœื™ืจื™ื ื’ ื–ื™ืงืึธืจืŸ ืื•ืŸ ืงืึทืฉ ื‘ืœืขื˜ืขืจ ืื™ื– ื™ืžืคึผืจื•ื•ื•ื“, ืื•ืŸ ื“ื™ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ืึทืงืกืขืก ืฆื• ืึทื ืึทืœืึทืงื™ื™ื˜ื™ื“ ื–ื™ืงืึธืจืŸ ื‘ืœืขื˜ืขืจ (ื‘ืœืึทื˜ ื—ืกืจื•ื ื•ืช) ืื™ื– ื™ืžืคึผืจื•ื•ื•ื“.
  • NVDIMM ืฉื˜ื™ืฆืŸ ืื™ื– ื™ืงืกืคึผืึทื ื“ื™ื“, ื“ืขื ืคึผืขืจืกื™ืกื˜ืขื ื˜ ื–ื›ึผืจื•ืŸ ืงืขื ืขืŸ ืื™ืฆื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื•ื•ื™ ื˜ืจืื“ื™ืฆื™ืื ืขืœืŸ ื‘ืึทืจืึทืŸ.
  • ื“ื™ ื™ื‘ืขืจื’ืึทื ื’ ืฆื• ื“ื™ ื“ื™ื ืึทืžื™ืฉ ื“ื™ื‘ืึทื’ื™ื ื’ ืกื™ืกื˜ืขื DTrace 2.0 ืื™ื– ื’ืขืžืื›ื˜, ื•ื•ืึธืก ื˜ืจืึทื ืกืคืขืจื“ ืฆื• ื ื•ืฆืŸ ื“ื™ eBPF ืงืขืจืŸ ืกืึทื‘ืกื™ืกื˜ืึทื. DTrace ืื™ืฆื˜ ืœื•ื™ืคื˜ ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ eBPF, ืขื ืœืขืš ืฆื• ื•ื•ื™ ื™ื’ื–ื™ืกื˜ื™ื ื’ ืœื™ื ื•ืงืก ื˜ืจื™ื™ืกื™ื ื’ ืžื›ืฉื™ืจื™ื ืœื•ื™ืคืŸ ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ eBPF.
  • ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ ื–ืขื ืขืŸ ื’ืขืžืื›ื˜ ืฆื• ื“ื™ OCFS2 (Oracle Cluster File System) ื˜ืขืงืข ืกื™ืกื˜ืขื.
  • ื™ืžืคึผืจื•ื•ื•ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ Btrfs ื˜ืขืงืข ืกื™ืกื˜ืขื. ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ Btrfs ืื•ื™ืฃ ื•ื•ืึธืจืฆืœ ืคึผืึทืจื˜ื™ืฉืึทื ื–. ืึทืŸ ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ื™ื ืกื˜ืึทืœืœืขืจ ืฆื• ืกืขืœืขืงื˜ื™ืจืŸ Btrfs ื•ื•ืขืŸ ืคืึธืจืžืึทื˜ื˜ื™ื ื’ ื“ืขื•ื•ื™ืกืขืก. ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉื˜ืขืœืŸ ื•ื™ืกื‘ื™ื™ึทื˜ืŸ ื˜ืขืงืขืก ืื•ื™ืฃ ืคึผืึทืจื˜ื™ืฉืึทื ื– ืžื™ื˜ Btrfs. Btrfs ื”ืื˜ ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืงืึทืžืคึผืจืขืฉืึทืŸ ืžื™ื˜ ื“ื™ ZStandard ืึทืœื’ืขืจื™ื“ืึทื.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ ืฆื•ื‘ื™ื ื“ ืคึฟืึทืจ ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืก I/O - io_uring, ื•ื•ืึธืก ืื™ื– ื ืึธื•ื˜ืึทื‘ืึทืœ ืคึฟืึทืจ ื–ื™ื™ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ I/O ืคึผืึธืœืœื™ื ื’ ืื•ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึทืจื‘ืขื˜ืŸ ืžื™ื˜ ืึธื“ืขืจ ืึธืŸ ื‘ืึทืคืขืจื™ื ื’. ืื™ืŸ ื˜ืขืจืžื™ื ืขืŸ ืคื•ืŸ ืคืึธืจืฉื˜ืขืœื•ื ื’, io_uring ืื™ื– ื–ื™ื™ืขืจ ื ืึธืขื ื˜ ืฆื• SPDK ืื•ืŸ ืื™ื– ื‘ืื˜ื™ื™ื˜ื™ืง ืคืึธืจื•ื™ืก ืคื•ืŸ ืœื™ื‘ืึทื™ืึธ ื•ื•ืขืŸ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืคึผืึธืœืœื™ื ื’ ืขื ื™ื™ื‘ืึทืœื“. ืฆื• ื ื•ืฆืŸ io_uring ืื™ืŸ ืกื•ืฃ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคืœื™ืกื ื“ื™ืง ืื™ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ, ื“ื™ ืœื™ื‘ืจื™ื ื’ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืื™ื– ืฆื•ื’ืขื’ืจื™ื™ื˜, ืคึผืจืึทื•ื•ื™ื™ื“ื™ื ื’ ืึท ื”ื•ื™ืš-ืžื“ืจื’ื” ื‘ื™ื™ื ื“ื™ื ื’ ืื™ื‘ืขืจ ื“ื™ ืงืขืจืŸ ืฆื•ื‘ื™ื ื“;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืžืึธื“ืข ืฉื˜ื™ืฆืŸ ืึทื“ื™ืึทื ื˜ื•ื ืคึฟืึทืจ ืฉื ืขืœ ืกื˜ืึธืจื™ื“ื–ืฉ ืขื ืงืจื™ืคึผืฉืึทืŸ.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืงืึทืžืคึผืจืขืฉืึทืŸ ื ื™ืฆืŸ ื“ื™ ืึทืœื’ืขืจื™ื“ืึทื ื–ืกื˜ืึทื ื“ืึทืจื“ (ื–ืกื˜ื“).
  • ื“ื™ ืขืงืกื˜4 ื˜ืขืงืข ืกื™ืกื˜ืขื ื ื™ืฆื˜ 64-ื‘ื™ืกืœ ื˜ื™ืžืขืกื˜ืึทืžืคึผืก ืื™ืŸ ื“ื™ ืกื•ืคึผืขืจื‘ืœืึธืงืง ืคืขืœื“ืขืจ.
  • XFS ื›ื•ืœืœ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืจื™ืคึผืึธืจื˜ื™ื ื’ ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืกื˜ืึทื˜ื•ืก ืคื•ืŸ ื“ื™ ื˜ืขืงืข ืกื™ืกื˜ืขื ื‘ืขืฉืึทืก ืึธืคึผืขืจืึทืฆื™ืข ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ื“ื™ ืกื˜ืึทื˜ื•ืก ืคื•ืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ืคืกืง ืื•ื™ืฃ ื“ื™ ืคืœื™ืขืŸ.
  • ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ TCP ืึธื ืœื™ื™ื’ืŸ ืื™ื– ืกื•ื•ื™ื˜ืฉื˜ ืฆื• ื“ื™ "ืคืจื™ ืึธืคึผืคืึธืจ ืฆื™ื™ื˜" ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ "ื•ื•ื™ ืฉื ืขืœ ื•ื•ื™ ืžืขื’ืœืขืš" ื•ื•ืขืŸ ืฉื™ืงื˜ ืคึผืึทืงื™ืฅ. GRO (ื’ืขื ืขืจื™ืง ื‘ืึทืงื•ืžืขืŸ ืึธืคืœืึธืึทื“) ืฉื˜ื™ืฆืŸ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืคึฟืึทืจ UDP. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืจื™ืกื™ื•ื•ื™ื ื’ ืื•ืŸ ืฉื™ืงื˜ ื˜ืงืคึผ ืคึผืึทืงื™ืฅ ืื™ืŸ ื ื•ืœ-ืงืึธืคึผื™ ืžืึธื“ืข.
  • ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ TLS ืคึผืจืึธื˜ืึธืงืึธืœ ืื•ื™ืฃ ื“ื™ ืงืขืจืŸ ืžื“ืจื’ื” (KTLS) ืื™ื– ื™ื ื•ื•ืึทืœื•ื•ื“, ื•ื•ืึธืก ืงืขื ืขืŸ ืื™ืฆื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื ื™ื˜ ื‘ืœื•ื™ื– ืคึฟืึทืจ ื’ืขืฉื™ืงื˜, ืึธื‘ืขืจ ืื•ื™ืš ืคึฟืึทืจ ื‘ืืงื•ืžืขืŸ ื“ืึทื˜ืŸ.
  • ืขื ื™ื™ื‘ืึทืœื“ ื•ื•ื™ ืึท ื‘ืึทืงืขื ื“ ืคึฟืึทืจ ื“ื™ ืคื™ื™ืจื•ื•ืึทืœ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜
    ื ืคื˜ืึทื‘ืœืขืก. ืึทืคึผืฉืึทื ืึทืœ ืฉื˜ื™ืฆืŸ ืฆื•ื’ืขื’ืขื‘ืŸ bpfilter.

  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ XDP (eXpress Data Path) ืกืึทื‘ืกื™ืกื˜ืึทื, ื•ื•ืึธืก ืึทืœืึทื•ื– ืคืœื™ืกื ื“ื™ืง BPF ืžื’ื™ืœื” ืื•ื™ืฃ ืœื™ื ื•ืงืก ืื•ื™ืฃ ื“ื™ ื ืขืฅ ืฉืึธืคืขืจ ืžื“ืจื’ื” ืžื™ื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื’ืœื™ื™ืš ืึทืงืกืขืก ื“ื™ DMA ืคึผืึทืงืึทื˜ ื‘ืึทืคืขืจ ืื•ืŸ ืื™ืŸ ื“ืขืจ ื‘ื™ื ืข ืื™ื™ื“ืขืจ ื“ื™ ืกืงื‘ื•ืฃ ื‘ืึทืคืขืจ ืื™ื– ืึทืœืึทืงื™ื™ื˜ื™ื“ ื“ื•ืจืš ื“ื™ ื ืขืฅ ืึธื ืœื™ื™ื’ืŸ.
  • ื™ืžืคึผืจื•ื•ื•ื“ ืื•ืŸ ืขื ื™ื™ื‘ืึทืœื“ ื•ื•ืขืŸ ื ื™ืฆืŸ UEFI Secure Boot ืžืึธื“ืข ืœืึทืงื“ืึทื•ืŸ, ื•ื•ืึธืก ืœื™ืžืึทืฅ ื•ื•ืึธืจืฆืœ ื‘ืึทื ื™ืฆืขืจ ืึทืงืกืขืก ืฆื• ื“ื™ ืงืขืจืŸ ืื•ืŸ ื‘ืœืึทืงืก UEFI Secure Boot ื‘ื™ื™ืคึผืึทืก ืคึผืึทื˜ืก. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืื™ืŸ ืœืึทืงื“ืึทื•ืŸ ืžืึธื“ืข, ืึทืงืกืขืก ืฆื• /dev/mem, /dev/kmem, /dev/port, /proc/kcore, debugfs, kprobes debug mode, mmiotrace, tracefs, BPF, PCMCIA CIS (Card Information Structure), ืขื˜ืœืขื›ืข ื™ื ื˜ืขืจืคื™ื™ืกื™ื– ื–ืขื ืขืŸ ืœื™ืžื™ื˜ืขื“ ACPI ืื•ืŸ MSR ืจืขื’ื™ืกื˜ืขืจืก ืคื•ืŸ ื“ื™ ืงืคึผื•, ืงืึทืœืœืก ืฆื• kexec_file ืื•ืŸ kexec_load ื–ืขื ืขืŸ ืืคื’ืขืฉื˜ืขืœื˜, ืฉืœืึธืคืŸ ืžืึธื“ืข ืื™ื– ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“, DMA ื ื•ืฆืŸ ืคึฟืึทืจ PCI ื“ืขื•ื•ื™ืกืขืก ืื™ื– ืœื™ืžื™ื˜ืขื“, ืึทืจื™ื™ึทื ืคื™ืจ ืคื•ืŸ ACPI ืงืึธื“ ืคื•ืŸ EFI ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืื™ื– ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“, ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทื ื– ืžื™ื˜ ื™ / ืึธ ืคึผืึธืจืฅ ื–ืขื ืขืŸ ื ื™ืฉื˜. ืขืจืœื•ื™ื‘ื˜, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื˜ืฉืึทื ื’ื™ื ื’ ื“ื™ ื™ื‘ืขืจืจื™ื™ึทืก ื ื•ืžืขืจ ืื•ืŸ ื™ / ืึธ ืคึผืึธืจื˜ ืคึฟืึทืจ ืกื™ืจื™ืึทืœ ืคึผืึธืจื˜.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืขื ื›ืึทื ืกื˜ IBRS (Enhanced Indirect Branch Restricted Speculation) ืื™ื ืกื˜ืจื•ืงืฆื™ืขืก, ื•ื•ืึธืก ืœืึธื–ืŸ ืื™ืจ ืึทื“ืึทืคึผื˜ื™ื•ื•ืœื™ ื’ืขื‘ืŸ ืื•ืŸ ื“ื™ืกื™ื™ื‘ืึทืœ ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื™ื ืกื˜ืจืึทืงืฉืึทื ื– ื‘ืขืฉืึทืก ื™ื‘ืขืจืจื™ื™ึทืกืŸ ืคึผืจืึทืกืขืกื™ื ื’, ืกื™ืกื˜ืขื ืจื•ืคื˜ ืื•ืŸ ืงืึธื ื˜ืขืงืกื˜ ืกื•ื•ื™ื˜ืฉื™ื–. ืžื™ื˜ ืขื ื›ืึทื ืกื˜ IBRS ืฉื˜ื™ืฆืŸ, ื“ืขื ืื•ืคึฟืŸ ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ืกืคึผืขืงื˜ืขืจ ื•ื• 2 ืื ืคืืœืŸ ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ืจืขื˜ืคึผืึธืœื™ื ืข, ื•ื•ื™ื™ึทืœ ืขืก ืึทืœืึทื•ื– ื”ืขื›ืขืจ ืคืึธืจืฉื˜ืขืœื•ื ื’.
  • ื™ืžืคึผืจื•ื•ื•ื“ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื™ืŸ ื•ื•ืขืจืœื“ื•ื•ื™ื™ื“ ื“ื™ื™ืจืขืงื˜ืขืจื™ื–. ืื™ืŸ ืึทื–ืึท ื“ื™ื™ืจืขืงื˜ืขืจื™ื–, ืขืก ืื™ื– ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“ ืฆื• ืฉืึทืคึฟืŸ FIFO ื˜ืขืงืขืก ืื•ืŸ ื˜ืขืงืขืก ืึธื•ื ื“ ื“ื•ืจืš ื™ื•ื–ืขืจื– ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ื’ืœื™ื™ึทื›ืŸ ื“ื™ ื‘ืึทื–ื™ืฆืขืจ ืคื•ืŸ ื“ื™ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืžื™ื˜ ื“ื™ ืงืœืขืคึผื™ืง ืคืึธืŸ.
  • ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืื•ื™ืฃ ARM ืกื™ืกื˜ืขืžืขืŸ, ืงืขืจืŸ ืึทื“ืจืขืก ืคึผืœืึทืฅ ืจืึทื ื“ืึทืžื™ื–ื™ื™ืฉืึทืŸ ืื•ื™ืฃ ืกื™ืกื˜ืขืžืขืŸ (KASLR) ืื™ื– ืขื ื™ื™ื‘ืึทืœื“. ืคึผื•ื™ื ื˜ืขืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืคึฟืึทืจ Aarch64.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ "NVMe ืื™ื‘ืขืจ Fabrics TCP".
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ Virtio-PMem ืฉืึธืคืขืจ ืฆื• ืฆื•ืฉื˜ืขืœืŸ ืึทืงืกืขืก ืฆื• ื’ืฉืžื™ื•ืช ืึทื“ืจืขืก ืคึผืœืึทืฅ-ืžืึทืคึผื˜ ืกื˜ืึธืจื™ื“ื–ืฉ ื“ืขื•ื•ื™ืกืขืก ืึทื–ืึท ื•ื•ื™ NVDIMMs.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’