AMD introduced Secure Encrypted Virtualization (SEV) to support confidential computing. This work evaluated the performance of SEV virtual machine (VM) live migration using the state-of-the-art Linux Kernel Virtual Machine (KVM) implementation for the first time. We found that the live migration of SEV VMs exhibits much higher performance overhead than regular VMs. Instead of adopting a clean-slate approach, we call for retrofitting KVM migration’s optimizations, including parallel migration and post-copy, to support SEV VMs. We identified key limitations of SEV that prohibit the proposed extension and demonstrated that KVM’s approaches can be incorporated to improve performance effectively by addressing the limitation.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Performance Implications of SEV Virtual Machine Live Migration

  • Jian-Lin Li,
  • Shih-Wei Li

摘要

AMD introduced Secure Encrypted Virtualization (SEV) to support confidential computing. This work evaluated the performance of SEV virtual machine (VM) live migration using the state-of-the-art Linux Kernel Virtual Machine (KVM) implementation for the first time. We found that the live migration of SEV VMs exhibits much higher performance overhead than regular VMs. Instead of adopting a clean-slate approach, we call for retrofitting KVM migration’s optimizations, including parallel migration and post-copy, to support SEV VMs. We identified key limitations of SEV that prohibit the proposed extension and demonstrated that KVM’s approaches can be incorporated to improve performance effectively by addressing the limitation.