Performance Implications of SEV Virtual Machine Live Migration
摘要
AMD introduced Secure Encrypted Virtualization (SEV) to support confidential computing. This work evaluated the performance of SEV virtual machine (VM) live migration using the state-of-the-art Linux Kernel Virtual Machine (KVM) implementation for the first time. We found that the live migration of SEV VMs exhibits much higher performance overhead than regular VMs. Instead of adopting a clean-slate approach, we call for retrofitting KVM migration’s optimizations, including parallel migration and post-copy, to support SEV VMs. We identified key limitations of SEV that prohibit the proposed extension and demonstrated that KVM’s approaches can be incorporated to improve performance effectively by addressing the limitation.