* Question about MDS mitigation
@ 2019-05-16 2:42 wencongyang (A)
2019-05-16 7:54 ` Liran Alon
0 siblings, 1 reply; 2+ messages in thread
From: wencongyang (A) @ 2019-05-16 2:42 UTC (permalink / raw)
To: linux-kernel, kvm
Cc: Huangzhichao, guijianfeng, gaowanlong, Chentao (Boby), Liujinsong (Paul)
Hi all
Fill buffers, load ports are shared between threads on the same physical core.
We need to run more than one vm on the same physical core.
Is there any complete mitigation for environments utilizing SMT?
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Question about MDS mitigation
2019-05-16 2:42 Question about MDS mitigation wencongyang (A)
@ 2019-05-16 7:54 ` Liran Alon
0 siblings, 0 replies; 2+ messages in thread
From: Liran Alon @ 2019-05-16 7:54 UTC (permalink / raw)
To: wencongyang (A)
Cc: linux-kernel, kvm, Huangzhichao, guijianfeng, gaowanlong,
Chentao (Boby), Liujinsong (Paul)
Indeed those CPU resources are shared between sibling hyperthreads on same CPU core.
There is currently no mechanism merged upstream to completely mitigate SMT-enabled scenarios.
Note that this is also true for L1TF.
There are several proposal to address this but they are still in early research mode.
For example, see this KVM address space isolation patch series developed by myself and Alexandre:
https://lkml.org/lkml/2019/5/13/515
(Which should be integrated with a mechanism which kick sibling hyperthreads when switching from KVM isolated address space to full kernel address space)
This partially mimics Microsoft work regarding HyperClear which you can read more about it here:
https://techcommunity.microsoft.com/t5/Virtualization/Hyper-V-HyperClear-Mitigation-for-L1-Terminal-Fault/ba-p/382429
-Liran
> On 16 May 2019, at 5:42, wencongyang (A) <wencongyang2@huawei.com> wrote:
>
> Hi all
>
> Fill buffers, load ports are shared between threads on the same physical core.
> We need to run more than one vm on the same physical core.
> Is there any complete mitigation for environments utilizing SMT?
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-05-16 7:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-05-16 2:42 Question about MDS mitigation wencongyang (A)
2019-05-16 7:54 ` Liran Alon
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).