ASSOCIATION OF MEMORY ACCESS THROUGH PROTECTION ATTRIBUTES THAT ARE ASSOCIATED TO AN ACCESS CONTROL LEVEL ON A PCI ADAPTER THAT SUPPORTS VIRTUALIZATION

• US 20080168461A1
• Filed: 03/25/2008
• Published: 07/10/2008
• Est. Priority Date: 02/25/2005
• Status: Active Grant

• Current Assignee: Giora Biran, Harvey Gene Kiel, Jaya Srikrishnan, Leah Shalev, Renato John Recio, Richard Louis Arndt, Vadim Makhervaks
• Original Assignee: Giora Biran, Harvey Gene Kiel, Jaya Srikrishnan, Leah Shalev, Renato John Recio, Richard Louis Arndt, Vadim Makhervaks
• Inventors: Kiel, Harvey Gene, Biran, Giora, Srikrishnan, Jaya, Recio, Renato John, Arndt, Richard Louis, Makhervaks, Vadim, Shalev, Leah
• Granted Patent: US 7,966,616 B2
• Time in Patent Office: Days
• US Class Current: 718/104
• CPC Class Codes: G06F 13/102 where the programme performs an interfacing function, e.g. device driver G06F13/105 takes precedence; scheduling within device drivers G06F9/52; contention policies within device drivers G06F9/4881
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices

Abstract

A method, system, and computer program product for sharing adapter resources among multiple operating system instances. The present invention provides a mechanism for dynamically allocating virtualized I/O adapter resources. The present invention separates the operation of adapter resource allocation from adapter resource management. Protection attributes within the adapter resource context are used to allow the adapter to enforce access control over the adapter resources. The hypervisor allocates an available adapter resource to a given partition. The adapter is notified of the allocation, and the adapter updates its internal structure to reflect the allocation. The hypervisor may revoke ownership of and reassign adapter resources to another OS instance. In this manner, the allocation described above allows for the simple reassignment of resources from one partition to another.

Claims

1. A method in a logical partitioned data processing system for dynamically sharing adapter resources among multiple operating system instances, comprising:

locating available resources in an adapter;

allocating at least part of the available adapter resources to a given partition, wherein a hypervisor is used to track allocated adapter resources and perform adapter resource allocation;

notifying the adapter of the adapter resource allocation to the given partition; and

updating an internal structure of the adapter to reflect the allocation.

2. The method of claim 1, further comprising:

revoking ownership of the allocated adapter resources; and

reallocating the adapter resources to another partition.

3. The method of claim 1, further comprising:

initializing the adapter resources, wherein an operating system instance is used to initialize the adapter resources.

4. The method of claim 1, wherein an adapter address space comprises privileged and non-privileged address ranges to allow the adapter to control access to adapter resources based on the address ranges.

5. The method of claim 1, wherein a privileged address range corresponds to a hypervisor access level, an operating system non-privileged range corresponds to an operating system access level, and an application non-privileged range corresponds to an application access level.

6. The method of claim 1, wherein the logical partitioned data processing system performs the allocation using a privileged address range.

7. The method of claim 3, wherein the operating system instance performs the initialization using an operating system non-privileged address range.

8. The method of claim 1, wherein dynamic sharing of adapter resources is performed according to partition demands.

9. The method of claim 1, wherein the internal structure of the adapter includes a resource context.

10. The method of claim 9, wherein each field of the resource context includes protection attributes to allow the adapter to determine the access level of accessing software.

11. The method of claim 1, wherein adapter address mapping is used to identify the protection level of accessing software.

12. The method of claim 1, wherein the adapter resources are allocated and revoked on an I/O page basis.

13. A logical partitioned data processing system for dynamically sharing adapter resources among multiple operating system instances, comprising:

a hypervisor, wherein the hypervisor is used to track allocated adapter resources and perform adapter resource allocation; and

an adapter;

wherein the hypervisor locates available resources in the adapter, allocates at least part of the available adapter resources to a given partition, and notifies the adapter of the adapter resource allocation to the given partition; and

wherein the adapter updates its internal structure to reflect the allocation.

14. The data processing system of claim 13, wherein the hypervisor revokes ownership of the allocated adapter resource and reallocates the adapter resources to another partition.

15. The data processing system of claim 13, further comprising:

an operating system instance, wherein the operating system instance initializes the adapter resources.

16. A computer program product in a computer readable medium for dynamically sharing adapter resources among multiple operating system instances, comprising:

first instructions for locating available resources in an adapter;

second instructions for allocating at least part of the available adapter resources to a given partition, wherein a hypervisor is used to track allocated adapter resources and perform adapter resource allocation;

third instructions for notifying the adapter of the adapter resource allocation to the given partition; and

fourth instructions for updating an internal structure of the adapter to reflect the allocation.

17. The computer program product of claim 16, further comprising:

fifth instructions for revoking ownership of the allocated adapter resources; and

sixth instructions for reallocating the adapter resources to another partition.

18. The computer program product of claim 16, further comprising:

seventh instructions for initializing the adapter resources, wherein an operating system instance is used to initialize the adapter resources.

19. The computer program product of claim 16, wherein an adapter address space comprises privileged and non-privileged address ranges to allow the adapter to control access to adapter resources based on the address ranges.

20. The computer program product of claim 16, wherein the hypervisor performs the allocation using a privileged address range.