Abstract:In virtualization technology domain, researches mainly focus on strengthening the isolation barrier between virtual machines (VMs) that are co-resident within a single physical machine At the same time, there are many kinds of communication intensive distributed applications such as web services, transaction processing, graphics rendering and high performance grid applications, which need to communicate with each other on the co-resident VMs Current inter-VM communication mechanisms can't adequately satisfy the requirement of such applications In this paper, we present the design and implementation of a high performance inter-VM communication mechanism called IVCOM in Xen virtual machine environment We propose IVCOM in para-virtualization and also extend for full-virtualization As a result of our survey, in Para-virtualization, there are mainly three kinds of overheads that contribute to the poor performance: the TCP/IP processing cost in each domain, page flipping overhead and long communication path between both sides of the socket IVCOM achieves high performance by bypassing protocol stacks, shunning page flipping and providing a direct and high performance communication path between VMs residing with the same physical machine And in Full-virtualization, frequent mode tuning between root mode and non-root mode import too much overhead IVCOM applies a direct communication channel between domain 0 and hardware virtual VM (HVM) and can greatly reduce the VM entry/exit operations which can improve the HVM performance In our evaluation, we observe that IVOCM can reduce the inter-VM round trip latency by up to 3 times and increase throughput by up to 3 times which prove the efficiency of IVCOM in para-virtualized environment In full-virtualized environment, IVCOM can greatly reduce mode tuning times in the communication between domain 0 and HVM.

Confining Windows Inter-Process Communications for OS-Level Virtual Machine

Houdini's Escape

Virtualizing System and Ordinary Services in Windows-based OS-Level Virtual Machines

Design and Implementation of SecPod, A Framework for Virtualization-Based Security Systems.

Armlock: Hardware-Based Fault Isolation For Arm

Vcerberus: A DRTM System Based on Virtualization Technology

Pcanel/V2: A VMM Architecture Based on Intel VT-x

Cerberus: A Novel Hypervisor to Provide Trusted and Isolated Code Execution

A high performance Inter-VM network communication mechanism

Inter-domain Communication Protocol for Real-time File Access Monitor of Virtual Machine

Two Optimization Mechanisms to Improve the Isolation Property of Server Consolidation in Virtualized Multi-core Server.

Cabin: Confining Untrusted Programs within Confidential VMs

Fuzzing IPC with Knowledge Inference

Barrier: a Lightweight Hypervisor for Protecting Kernel Integrity Via Memory Isolation.

A Bare-Metal and Asymmetric Partitioning Approach to Client Virtualization

AVMM: Virtualize Network Client with a Bare-Metal and Asymmetric Partitioning Approach

A Kind of Message-Based Interprocess Communication

Portable Desktop Applications Based on User-Level Virtualization 1

Exit-Less Hypercall: Asynchronous System Calls in Virtualized Processes

One-Way Isolation Execution Model Based on Hardware Virtualization

On the effectiveness of virtualization-based security