Discussion of the VIRTIO specification
 help / color / mirror / Atom feed
  • * [virtio-comment] Re: [virtio-dev] Re: [PATCH 0/5] virtio: introduce SUSPEND bit and vq state
           [not found]                         ` <PH0PR12MB548110E53C924C984FA24A49DCF9A@PH0PR12MB5481.namprd12.prod.outlook.com>
           [not found]                           ` <20230920101402-mutt-send-email-mst@kernel.org>
    @ 2023-09-21  9:18                           ` Zhu, Lingshan
      2023-09-21  9:26                             ` [virtio-comment] " Parav Pandit
      1 sibling, 1 reply; 29+ messages in thread
    From: Zhu, Lingshan @ 2023-09-21  9:18 UTC (permalink / raw)
      To: Parav Pandit, Michael S. Tsirkin, eperezma@redhat.com,
    	Stefan Hajnoczi, Cornelia Huck, Jason Wang
      Cc: virtio-dev@lists.oasis-open.org,
    	virtio-comment@lists.oasis-open.org
    
    
    
    On 9/20/2023 9:41 PM, Parav Pandit wrote:
    >> From: Michael S. Tsirkin <mst@redhat.com>
    >> Sent: Wednesday, September 20, 2023 6:12 PM
    >> And Parav same goes for you - can you summarize Zhu Lingshan's position?
    > Below is my summary about Zhu Lingshan's position:
    >
    > One line summary of his position in my view:
    >
    > 0. Use inband device migration only, use mediation, mediation is secure, but AQ is not secure.
    >
    > Details of his position in my view:
    >
    > 1. Device migration must be done through VF itself by suspending specific vqs and the VF device both.
    Not exactly, my series implements basic facilities for live migration, 
    admin vq solution can reuse them
    for sure. admin vq solution can work for some use cases, but for others, 
    you still need to resolve
    the issues we talked before.
    > 2. When device migration is done using #1, it must be done using mediation approach in hypervisor.
    for fundamentals of virtualization, it is trap and emulate, I think 
    Jason have told you many times.
    >
    > 3. When migration is done using inband mediation it is more secure than AQ approach.
    > (as opposed to AQ of the owner device who enables/disables SR-IOV).
    VF owns it and the hypervisor owns the VF, so no side channel.
    >
    > 4. AQ is not secure.
    > But,
    so many times discussions....
    > 5. AQ and admin commands can be built on top of his proposal #1, even if AQ is less secure. Opposing statements...
    The security leaks and attacking surface are introduced by AQ, not the 
    basic facilities,
    >
    > 6. Dirty page tracking and inflight descriptors tracking to be done in his v1. but he does not want to review such coverage in [1].
    Will be done in V2, and they are still config space solution, with help 
    of the hypervisor.
    >
    > 8. Since his series does not cover any device context migration and does not talk anything about it,
    > I deduce that he plans to use cvq for setting ups RSS and other fields using inband CVQ of the VF.
    > This further limit the solution to only net device, ignoring rest of the other 20+ device types, where all may not have the CVQ.
    Any difference from current vhost solution?
    >
    > 9. trapping and emulation of following objects: AQ, CVQ, virtio config space, PCI FLR flow in hypervisor is secure, but when if AQ of the PF do far small work of it, AQ is not secure.
    for cvq, you should read Eugenio's patcheset, it is secure. For others, 
    we have discussed for many times, no need to repeat.
    >
    > 10. Any traps proposed in #9 mostly do not work with future TDISP as TDISP do not bifurcate the device, so ignore them for now to promote inband migration.
    TDISP devices can not be migrated for now, and the TDISP spec make clear 
    examples of attacking models, your admin vq LM on the PF exactly match 
    the model.
    
    Sorry I have to repeat this again, this is the last time.
    >
    > 11. He do not show interest in collaboration (even after requesting few times) to see if we can produce common commands that may work for both passthrough (without mediation) and using mediation for nested case.
    as repeated for many times, we are implementing basic facilities, and 
    you can reuse the basic facilities for live migration in admin vq 
    design, do you want to cooperate?
    >
    > 12. Some how register access on single physical card for the PFs and VFs gives better QoS guarantee than virtqueue as registers can scale infinitely no matter how many VFs or for multiple VQs because it is per VF.
    that is per-device facilities.
    >
    > [1] https://lore.kernel.org/virtio-comment/20230909142911.524407-7-parav@nvidia.com/T/#md9fcfa1ba997463de8c7fb8c6d1786b224b0bead
    
    
    This publicly archived list offers a means to provide input to the
    OASIS Virtual I/O Device (VIRTIO) TC.
    
    In order to verify user consent to the Feedback License terms and
    to minimize spam in the list archive, subscription is required
    before posting.
    
    Subscribe: virtio-comment-subscribe@lists.oasis-open.org
    Unsubscribe: virtio-comment-unsubscribe@lists.oasis-open.org
    List help: virtio-comment-help@lists.oasis-open.org
    List archive: https://lists.oasis-open.org/archives/virtio-comment/
    Feedback License: https://www.oasis-open.org/who/ipr/feedback_license.pdf
    List Guidelines: https://www.oasis-open.org/policies-guidelines/mailing-lists
    Committee: https://www.oasis-open.org/committees/virtio/
    Join OASIS: https://www.oasis-open.org/join/
    
    
    ^ permalink raw reply	[flat|nested] 29+ messages in thread
  • [parent not found: <CACGkMEsn+9AqgmurN8-GXkcu8UxAr62_woJn3XZN+oUkTQNPUg@mail.gmail.com>]
  • * [virtio-comment] [PATCH 0/5] virtio: introduce SUSPEND bit and vq state
    @ 2023-09-06  8:16 Zhu Lingshan
      2023-09-14 11:37 ` [virtio-comment] " Michael S. Tsirkin
      0 siblings, 1 reply; 29+ messages in thread
    From: Zhu Lingshan @ 2023-09-06  8:16 UTC (permalink / raw)
      To: jasowang, mst, eperezma, cohuck, stefanha
      Cc: virtio-comment, virtio-dev, Zhu Lingshan
    
    This series introduces
    1)a new SUSPEND bit in the device status
    Which is used to suspend the device, so that the device states
    and virtqueue states are stabilized.
    
    2)virtqueue state and its accessor, to get and set last_avail_idx
    and last_used_idx of virtqueues.
    
    The main usecase of these new facilities is Live Migration.
    
    Future work: dirty page tracking and in-flight descriptors.
    
    This series addresses many comments from Jason, Stefan and Eugenio
    from RFC series.
    
    Zhu Lingshan (5):
      virtio: introduce vq state as basic facility
      virtio: introduce SUSPEND bit in device status
      virtqueue: constraints for virtqueue state
      virtqueue: ignore resetting vqs when SUSPEND
      virtio-pci: implement VIRTIO_F_QUEUE_STATE
    
     content.tex       | 118 ++++++++++++++++++++++++++++++++++++++++++++++
     transport-pci.tex |  18 +++++++
     2 files changed, 136 insertions(+)
    
    -- 
    2.35.3
    
    
    This publicly archived list offers a means to provide input to the
    OASIS Virtual I/O Device (VIRTIO) TC.
    
    In order to verify user consent to the Feedback License terms and
    to minimize spam in the list archive, subscription is required
    before posting.
    
    Subscribe: virtio-comment-subscribe@lists.oasis-open.org
    Unsubscribe: virtio-comment-unsubscribe@lists.oasis-open.org
    List help: virtio-comment-help@lists.oasis-open.org
    List archive: https://lists.oasis-open.org/archives/virtio-comment/
    Feedback License: https://www.oasis-open.org/who/ipr/feedback_license.pdf
    List Guidelines: https://www.oasis-open.org/policies-guidelines/mailing-lists
    Committee: https://www.oasis-open.org/committees/virtio/
    Join OASIS: https://www.oasis-open.org/join/
    
    
    ^ permalink raw reply	[flat|nested] 29+ messages in thread

    end of thread, other threads:[~2023-10-13 10:24 UTC | newest]
    
    Thread overview: 29+ messages (download: mbox.gz follow: Atom feed
    -- links below jump to the message on this page --
         [not found] <PH0PR12MB5481C41D4F32DA26D5831471DCFBA@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found] ` <213a0f94-cee2-d8c5-3c5d-d2d7fc920e75@intel.com>
         [not found]   ` <PH0PR12MB5481AE8C6E5EAFE9A4ADA6F6DCFBA@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]     ` <f1fe513e-d42d-03a6-348c-5e58aac0a759@intel.com>
         [not found]       ` <PH0PR12MB5481323A3B4D67EB66328476DCFBA@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]         ` <5f01772f-eb27-bfe0-7f69-b83fbd90dda0@intel.com>
         [not found]           ` <PH0PR12MB5481ABF4B9BC2082BC54AB1DDCFBA@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]             ` <20230918144312-mutt-send-email-mst@kernel.org>
         [not found]               ` <bb402c34-ad07-063a-f4f5-d8c6b3a642c7@intel.com>
         [not found]                 ` <20230920054836-mutt-send-email-mst@kernel.org>
         [not found]                   ` <2f67fb85-2238-9c34-a265-b0f97b7ab7e1@intel.com>
         [not found]                     ` <20230920075243-mutt-send-email-mst@kernel.org>
         [not found]                       ` <20230920084058-mutt-send-email-mst@kernel.org>
         [not found]                         ` <PH0PR12MB548110E53C924C984FA24A49DCF9A@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]                           ` <20230920101402-mutt-send-email-mst@kernel.org>
         [not found]                             ` <PH0PR12MB54816F8341A77E63831316DBDCF9A@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]                               ` <20230920160218-mutt-send-email-mst@kernel.org>
         [not found]                                 ` <PH0PR12MB54814A89793CF796412D6A27DCF8A@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]                                   ` <20230921004957-mutt-send-email-mst@kernel.org>
    2023-09-21  9:06                                     ` [virtio-comment] Re: [virtio-dev] Re: [PATCH 0/5] virtio: introduce SUSPEND bit and vq state Zhu, Lingshan
    2023-09-21  9:18                           ` Zhu, Lingshan
    2023-09-21  9:26                             ` [virtio-comment] " Parav Pandit
    2023-09-21  9:55                               ` [virtio-comment] " Zhu, Lingshan
    2023-09-21 11:28                                 ` [virtio-comment] " Parav Pandit
    2023-09-22  2:40                                   ` [virtio-comment] " Zhu, Lingshan
         [not found]                   ` <CACGkMEsn+9AqgmurN8-GXkcu8UxAr62_woJn3XZN+oUkTQNPUg@mail.gmail.com>
         [not found]                     ` <PH0PR12MB5481830365A80EF4583A3FFADCF8A@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]                       ` <CACGkMEshxAU3Mjo7vczBNRb=P=FnenO4mPb9HJL0Ma3ZRbe-oA@mail.gmail.com>
         [not found]                         ` <PH0PR12MB548172996D62E37714A9776BDCF8A@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]                           ` <CACGkMEtW88zJkDQL58NqLzzudq=f+SmzJ8bha55Dd2fd=FRGBQ@mail.gmail.com>
    2023-09-22  3:39                             ` Zhu, Lingshan
         [not found]                             ` <PH0PR12MB5481573D6EE3BE03FB7C3D70DCFCA@PH0PR12MB5481.namprd12.prod.outlook.com>
         [not found]                               ` <CACGkMEvOxraeVB-5g7dJ-KBN=63kpmDfDdqaiQVyDh8egDjsGw@mail.gmail.com>
         [not found]                                 ` <PH0PR12MB5481C11F6D68A892A091E2AFDCC3A@PH0PR12MB5481.namprd12.prod.outlook.com>
    2023-09-26  5:36                                   ` Zhu, Lingshan
    2023-09-26  6:03                                     ` [virtio-comment] " Parav Pandit
    2023-09-26  9:25                                       ` [virtio-comment] " Zhu, Lingshan
    2023-09-26 10:48                                         ` Michael S. Tsirkin
    2023-09-27  8:20                                           ` Zhu, Lingshan
    2023-09-27 10:39                                             ` [virtio-comment] " Parav Pandit
    2023-10-09 10:05                                               ` [virtio-comment] " Zhu, Lingshan
    2023-10-09 10:07                                                 ` [virtio-comment] " Parav Pandit
    2023-09-27 15:40                                             ` [virtio-comment] " Michael S. Tsirkin
    2023-10-09 10:01                                               ` Zhu, Lingshan
    2023-10-11 10:20                                                 ` Michael S. Tsirkin
    2023-10-11 10:38                                                   ` Zhu, Lingshan
    2023-10-11 11:52                                                     ` Parav Pandit
    2023-10-12 10:57                                                       ` Zhu, Lingshan
    2023-10-12 11:13                                                         ` Michael S. Tsirkin
    2023-10-12  9:59                                                     ` Michael S. Tsirkin
    2023-10-12 10:49                                                       ` Zhu, Lingshan
    2023-10-12 11:12                                                         ` Michael S. Tsirkin
    2023-10-13 10:18                                                           ` [virtio-comment] Re: [virtio-dev] " Zhu, Lingshan
    2023-10-12 14:38                                                         ` Michael S. Tsirkin
    2023-10-13 10:23                                                           ` Zhu, Lingshan
    2023-09-06  8:16 [virtio-comment] " Zhu Lingshan
    2023-09-14 11:37 ` [virtio-comment] " Michael S. Tsirkin
    2023-09-15  4:41   ` [virtio-comment] Re: [virtio-dev] " Zhu, Lingshan
    

    This is a public inbox, see mirroring instructions
    for how to clone and mirror all data and code used for this inbox