Meer informatie virtualisatie

Virtualization.info

Virtual Desktop Infrastructure (VDI)

Enforcing Performance Isolation Across Virtual Machines in Xen

In this paper, we present the design and evaluation of a set of primitives implemented in Xen to address this issue. First, XenMon accurately measures per-VM resource consumption, including work done on behalf of a particular VM in Xen's driver domains. Next, our SEDF-DC scheduler accounts for aggregate VM resource consumption in allocating CPU. Finally, ShareGuard limits the total amount of resources consumed in privileged and driver domains based on administrator-specified limits. Our performance evaluation indicates that ourmechanisms effectively enforce performance isolation for a variety of workloads and configurations.

An Empirical Study into the Security Exposure to Hosts of Hostile Virtualized Environments

This paper seeks to test how safe the assumptions of isolation and containment are in practice through the analysis of several popular virtual machine implementations for the x86 architecture in use today. While this is not a new concept, Ferrie describes how DOS-based, reduced privilege virtual machines could be trivially escaped from[22], and Tim Shelton describes a flaw in the VMware Workstation NAT service that could result in compromising the host machine[24], little other research has been published in this area.

Building a MAC-Based Security Architecture for the Xen Open-Source Hypervisor

This paper explores the design and implementation of sHype, a security architecture for virtualization environments that controls the sharing of resources among VMs according to formal security policies. sHype goals include near-zero overhead on the performance-critical path, non-intrusiveness with regard to existing VMM code, scalability of system management to many machines via simple policies, and support for VM migration via machine-independent policies.

libvirt, the virtualization API

libvirt is:
- A toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes).
- Free software available under the GNU Lesser General Public License.
- A long term stable C API
- A set of bindings for common languages
- A CIM provider for the DMTF virtualization schema

Blog Mangominds

Virtuall

EarlyBert