* KVM, Entropy and Windows
@ 2011-02-16 19:54 --[ UxBoD ]--
2011-02-17 9:11 ` Avi Kivity
0 siblings, 1 reply; 5+ messages in thread
From: --[ UxBoD ]-- @ 2011-02-16 19:54 UTC (permalink / raw)
To: kvm
Hello all,
I believe I am hitting a problem on one of our Windows 2003 KVM guests were I believe it is running out of Entropy and causing SSL issues.
I see that there is a module called virtio-rng which I believe passes the HW entropy source through to the guest but does this work on Windows as-well ?
If it doesn't any ideas on how I can increase the amount of entropy being generated on a headless system ? or even monitor entropy on a Windows system ?
Thank you in advance.
--
Thanks, Phil
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KVM, Entropy and Windows
2011-02-16 19:54 KVM, Entropy and Windows --[ UxBoD ]--
@ 2011-02-17 9:11 ` Avi Kivity
2011-02-17 10:09 ` Vadim Rozenfeld
0 siblings, 1 reply; 5+ messages in thread
From: Avi Kivity @ 2011-02-17 9:11 UTC (permalink / raw)
To: --[ UxBoD ]--; +Cc: kvm, Vadim Rozenfeld
On 02/16/2011 09:54 PM, --[ UxBoD ]-- wrote:
> Hello all,
>
> I believe I am hitting a problem on one of our Windows 2003 KVM guests were I believe it is running out of Entropy and causing SSL issues.
>
> I see that there is a module called virtio-rng which I believe passes the HW entropy source through to the guest but does this work on Windows as-well ?
>
AFAIK there is no Windows driver for virtio-rng. Seems like a good
idea. Vadim?
> If it doesn't any ideas on how I can increase the amount of entropy being generated on a headless system ? or even monitor entropy on a Windows system ?
No idea. Maybe you could ask Windows to collect entropy from packet
timings.
--
error compiling committee.c: too many arguments to function
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KVM, Entropy and Windows
2011-02-17 9:11 ` Avi Kivity
@ 2011-02-17 10:09 ` Vadim Rozenfeld
2011-02-17 10:37 ` Dor Laor
0 siblings, 1 reply; 5+ messages in thread
From: Vadim Rozenfeld @ 2011-02-17 10:09 UTC (permalink / raw)
To: Avi Kivity; +Cc: --[ UxBoD ]--, kvm
On Thu, 2011-02-17 at 11:11 +0200, Avi Kivity wrote:
> On 02/16/2011 09:54 PM, --[ UxBoD ]-- wrote:
> > Hello all,
> >
> > I believe I am hitting a problem on one of our Windows 2003 KVM guests were I believe it is running out of Entropy and causing SSL issues.
> >
> > I see that there is a module called virtio-rng which I believe passes the HW entropy source through to the guest but does this work on Windows as-well ?
> >
>
> AFAIK there is no Windows driver for virtio-rng. Seems like a good
> idea. Vadim?
virtio-rng driver for windows is not a big deal. IMO, the real problem
will be to force Windows to use for CriptoApi.
>
> > If it doesn't any ideas on how I can increase the amount of entropy being generated on a headless system ? or even monitor entropy on a Windows system ?
>
> No idea. Maybe you could ask Windows to collect entropy from packet
> timings.
>
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KVM, Entropy and Windows
2011-02-17 10:09 ` Vadim Rozenfeld
@ 2011-02-17 10:37 ` Dor Laor
2011-02-17 11:09 ` Vadim Rozenfeld
0 siblings, 1 reply; 5+ messages in thread
From: Dor Laor @ 2011-02-17 10:37 UTC (permalink / raw)
To: Vadim Rozenfeld; +Cc: Avi Kivity, --[ UxBoD ]--, kvm
On 02/17/2011 12:09 PM, Vadim Rozenfeld wrote:
> On Thu, 2011-02-17 at 11:11 +0200, Avi Kivity wrote:
>> On 02/16/2011 09:54 PM, --[ UxBoD ]-- wrote:
>>> Hello all,
>>>
>>> I believe I am hitting a problem on one of our Windows 2003 KVM guests were I believe it is running out of Entropy and causing SSL issues.
>>>
>>> I see that there is a module called virtio-rng which I believe passes the HW entropy source through to the guest but does this work on Windows as-well ?
>>>
>>
>> AFAIK there is no Windows driver for virtio-rng. Seems like a good
>> idea. Vadim?
> virtio-rng driver for windows is not a big deal. IMO, the real problem
> will be to force Windows to use for CriptoApi.
What's the implication of it? good or bad?
Do you know what hyper-v is doing for it?
>>
>>> If it doesn't any ideas on how I can increase the amount of entropy being generated on a headless system ? or even monitor entropy on a Windows system ?
>>
>> No idea. Maybe you could ask Windows to collect entropy from packet
>> timings.
>>
>
>
> --
> To unsubscribe from this list: send the line "unsubscribe kvm" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KVM, Entropy and Windows
2011-02-17 10:37 ` Dor Laor
@ 2011-02-17 11:09 ` Vadim Rozenfeld
0 siblings, 0 replies; 5+ messages in thread
From: Vadim Rozenfeld @ 2011-02-17 11:09 UTC (permalink / raw)
To: dlaor; +Cc: Avi Kivity, --[ UxBoD ]--, kvm
On Thu, 2011-02-17 at 12:37 +0200, Dor Laor wrote:
> On 02/17/2011 12:09 PM, Vadim Rozenfeld wrote:
> > On Thu, 2011-02-17 at 11:11 +0200, Avi Kivity wrote:
> >> On 02/16/2011 09:54 PM, --[ UxBoD ]-- wrote:
> >>> Hello all,
> >>>
> >>> I believe I am hitting a problem on one of our Windows 2003 KVM guests were I believe it is running out of Entropy and causing SSL issues.
> >>>
> >>> I see that there is a module called virtio-rng which I believe passes the HW entropy source through to the guest but does this work on Windows as-well ?
> >>>
> >>
> >> AFAIK there is no Windows driver for virtio-rng. Seems like a good
> >> idea. Vadim?
> > virtio-rng driver for windows is not a big deal. IMO, the real problem
> > will be to force Windows to use for CriptoApi.
>
> What's the implication of it? good or bad?
iirc, Vista and higher use a new generation of cryptography API.
CriptoApi can be integrated with smart cards sub-system. If we
can make Windows virtio-rng driver to be attachable to smart cart
devstack, I think we can solve the problem.
> Do you know what hyper-v is doing for it?
>
No idea.
> >>
> >>> If it doesn't any ideas on how I can increase the amount of entropy being generated on a headless system ? or even monitor entropy on a Windows system ?
> >>
> >> No idea. Maybe you could ask Windows to collect entropy from packet
> >> timings.
> >>
> >
> >
> > --
> > To unsubscribe from this list: send the line "unsubscribe kvm" in
> > the body of a message to majordomo@vger.kernel.org
> > More majordomo info at http://vger.kernel.org/majordomo-info.html
>
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2011-02-17 11:10 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-02-16 19:54 KVM, Entropy and Windows --[ UxBoD ]--
2011-02-17 9:11 ` Avi Kivity
2011-02-17 10:09 ` Vadim Rozenfeld
2011-02-17 10:37 ` Dor Laor
2011-02-17 11:09 ` Vadim Rozenfeld
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox