Nested Virtualization (X86) Part I

on YouTube ↗30m

" summary

Motivation and first-steps implementation for x86 nested virtualization with AMD-first details: explains using nested HVM for testing and enabling Windows features like Credential Guard, maps guest->machine memory via EPT/NPT second-stage paging, shows how L0 creates a VM control block called VMCB02 and a PTM2 that maps L2->machine, and describes current inefficiencies (full EP flushes, naive shadow paging) and Intel differences that use shadow VMCS and VMREAD/VMWRITE via MSRs.

AI-written summary · about

" chapters (6)

1. 0:00Introduction and motivation
2. 2:54Hardware virtualization basics
3. 6:15CPU and memory virtualization
4. 12:11Nested virtualization design
5. 22:22AMD vs. Intel differences
6. 27:26Discussion and wrap-up

" related talks

• 03h 01mHands-on Introduction to VirtualizationJulien Durillon, Samuel Ortiz, Pierre-Antoine Grégoire · Devoxx France 2021
• 31mKVM Nested Virtualization: Workings and UsecasesBandan Das · FOSSASIA Summit 2017
• 21mEmulating Hyper-V in 2022Vitaly Kuznetsov · KVM Forum 2022
• 23mHyper-V's Virtual Secure Mode in KVM project updateNicolas Saenz Julienne · Linux Plumbers Conference 2023
• 22mAMD-vIOMMU: A Hardware-assisted Virtual IOMMU TechnologyWei Huang, Suravee Suthikulpanit · KVM Forum 2020
• 11mAdvanced Parallel Memory VirtualizationYulei Zhang · KVM Forum 2020
• 31mPVH Technical Deep DiveGeorge Dunlap · Xen Project User Summit 2013
• 26mHVM Dom0: Any unmodified OS as Dom0Will Auld · Xen Project User Summit 2013