Hands-on Introduction to Virtualization
summary
Explains CPU virtualization at the instruction and microarchitecture level, showing why only about 40 privileged ops trap while most code runs natively, and why vm‑exits are very costly. Describes Intel VT-x/VMX, nested page tables (EPT/NPT), TLB and address‑translation overheads, how to monitor vm‑exit sources, and practical mitigations: virtio, VFIO, SR‑IOV for I/O, device passthrough with IOMMU, and lightweight VMs like KVM combined with Kata or Firecracker for strong isolation with container-like speed.
AI-written summary · about
chapters (8)
- 0:00Virtualisation introduction
- 28:17CPU and virtualisation
- 1:07:25Hardware virtualisation with VMX
- 1:35:32Virtual memory management
- 2:01:58Hardware communication
- 2:31:38Paravirtualisation and devices
- 2:50:11Hypervisors and containers
- 3:00:13Q&A
related talks
30mNested Virtualization (X86) Part I
32mIntroduce Virtualization and Kernel Infrastructure to Newbies
31mKVM Nested Virtualization: Workings and Usecases
32mIntroduce Virtualization and Kernel Infrastructure to Newbies
30mNested Virtualization (X86) Part II
25mThe Qemu/KVM ecosystem: Navigating the code!
23mHyper-V's Virtual Secure Mode in KVM project update
21mEmulating Hyper-V in 2022