Efficient Nested Virtualization

• US 20110153909A1
• Filed: 12/22/2009
• Published: 06/23/2011
• Est. Priority Date: 12/22/2009
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Dong, Yao Zu
• Application Number:
  US12/644,847
• Publication Number:
  US 20110153909A1
• Time in Patent Office: Days
• US Class Current: 711/6
• CPC Class Codes: G06F 2009/45566 Nested virtual machines
• CPC Class Codes: G06F 2009/45579 I/O management, e.g. providing access to device drivers or storage
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

In one embodiment of the invention, the exit and/or entry process in a nested virtualized environment is made more efficient. For example, a layer 0 (L0) virtual machine manager (VMM) may emulate a layer 2 (L2) guest interrupt directly, rather than indirectly through a layer 1 (L1) VMM. This direct emulation may occur by, for example, sharing a virtual state (e.g., virtual CPU state, virtual Device state, and/or virtual physical Memory state) between the L1 VMM and the L0 VMM. As another example, L1 VMM information (e.g., L2 physical to machine address translation table) may be shared between the L1 VMM and the L0 VMM.

Claims

1. A method comprising:

generating, using a processor, a first virtual machine (VM) and storing the first VM in a memory coupled to the processor;

executing a guest application with the first VM;

executing the first VM with a first virtual machine monitor (VMM);

executing the first VMM with a second VMM in a nested virtualization environment; and

directly emulating an underlying virtualized device to the guest with the second VMM;

wherein the second VMM is included in a lower virtualization layer than the first VMM and the virtualized device is coupled to the processor.

2. The method of claim 1 including directly emulating the device to the guest with the second VMM by bypassing the first VMM.

3. The method of claim 1 including directly emulating the device to the guest with the second VMM by bypassing the first VMM based on sharing virtual device state information, corresponding to the device, between the first and second VMMs.

4. The method of claim 1 including:

directly emulating the device to the guest with the second VMM by bypassing the first VMM based on sharing virtual processor state information between the first and second VMMs; and

storing the virtual processor state information in a memory portion coupled to the processor.

5. The method of claim 1 including directly emulating the device to the guest with the second VMM by bypassing the first VMM based on sharing virtual physical memory state information, related to the guest, between the first and second VMMs.

6. The method of claim 1 including directly emulating the device to the guest with the second VMM by bypassing the first VMM based on sharing address translation information, related to the guest, between the first and second VMMs.

7. The method of claim 1, wherein the first and second VMMs include equivalent device models.

8. The method of claim 1, including directly emulating a paravirtualized device driver corresponding to the guest.

9. The method of claim 1, including sending network packet information from the guest directly to the second VMM bypassing the first VMM.

10. An article comprising a medium storing instructions that enable a processor-based system to:

execute a guest application on a first virtual machine (VM);

execute the first VM on a first virtual machine monitor (VMM);

execute the first VMM on a second VMM in a nested virtualization environment; and

directly emulate an underlying virtualized entity to the guest with the second VMM.

11. The article of claim 10, further storing instructions that enable the system to directly emulate the entity to the guest with the second VMM by bypassing the first VMM.

12. The article of claim 10, further storing instructions that enable the system to directly emulate the entity to the guest with the second VMM by bypassing the first VMM based on sharing virtual entity state information, corresponding to the entity, between the first and second VMMs.

13. The article of claim 10, further storing instructions that enable the system to directly emulate the entity to the guest with the second VMM by bypassing the first VMM based on sharing virtual processor state information between the first and second VMMs.

14. The article of claim 10, further storing instructions that enable the system to directly emulate the entity to the guest with the second VMM by bypassing the first VMM based on sharing virtual memory state information, related to the guest, between the first and second VMMs.

15. The article of claim 10, wherein the entity includes a virtualized device.

16. An apparatus comprising:

a processor, coupled to a memory, to (1) execute a guest application on a first virtual machine (VM) stored in the memory;

(2) execute the first VM on a first virtual machine monitor (VMM);

(3) execute the first VMM on a second VMM in a nested virtualization environment; and

(4) directly emulate an underlying virtualized entity to the guest with the second VMM.

17. The apparatus of claim 16, wherein the processor is to directly emulate the entity to the guest with the second VMM by bypassing the first VMM.

18. The apparatus of claim 16, wherein the processor is to directly emulate the entity to the guest with the second VMM by bypassing the first VMM based on sharing virtual guest state information between the first and second VMMs.

19. The apparatus of claim 16, wherein the processor is to directly emulate the entity to the guest with the second VMM by bypassing the first VMM based on sharing virtual guest processor state information between the first and second VMMs.

20. The apparatus of claim 16, wherein the processor is to directly emulate the entity to the guest with the second VMM by bypassing the first VMM based on sharing virtual memory state information, related to the guest, between the first and second VMMs.