From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Mike D. Day" Subject: Re: A migration framework for external devices Date: Thu, 09 Feb 2006 13:58:20 -0500 Message-ID: <43EB90CC.4020006@us.ibm.com> References: <43EB766A.30701@us.ibm.com> <43EB8B89.80909@us.ibm.com> <43EB8DB7.4030503@us.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <43EB8DB7.4030503@us.ibm.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: Anthony Liguori Cc: Ronald Perez , "Scarlata, Vincent R" , "Cihula, Joseph" , Stefan Berger , xen-devel@lists.xensource.com List-Id: xen-devel@lists.xenproject.org Anthony Liguori wrote: > If the Xend is always listening for migrations on a well-known port, it > is trivially easy to start migrating domains to that host. If the port > number isn't decided until the time of migration (and better yet, is > decided through a secure channel like SSH), it makes it difficult to > determine when a port is open to migrate to and which port that is. All you are doing with the dynamic port is making it harder for the novice. It is good design but not security. (How many network services do you know of that gain security by using variable ports?) > All devices have to have their state migrated in some form. There's > already code to handle that in Xend (via the S-Expression configuration > file). The only reason TPM migration doesn't just work is that the > current state migration is unidirectional and TPM requires bidirectional > state synchronization. I was thinking far beyond the front-end devices themselves and considering the physical devices on the target machine, many of which will be dual-ported storage, vlans, and other things that need physical configuration in order to support the migrated virtual devices. That is still a missing piece in the migration solution. > All that's strictly required here is the ability to transfer the TPM > state. This is just a little bit of additional code in XendCheckpoint > that ran after suspend to transfer the TPM state. Sorry, I disagree. A lot more is required for migration to be a useful solution. Mike