Virtio-ipsec F.F. Ozog (6WIND) v1 (2015/05/29)

DPACC virtio deliverable It’s time to organize as an open SOURCE community Freescale produced a virtio-ipsec specification Is virtio-ipsec simpler ? Is virtio-compression even simpler ? Let’s choose and implement it We need a dpacc-virtio-[ipsec|crypto|compression] git repository Who is willing to participate 21/10/2019

Reminder Extensible Paravirtualized Devices

EPD: hardware accelerator Application Use Exec Env guest vCrypto Initialization phase sio vHost-user SRL SAL host Crypto hio Accelerator HW Crypto device 21/10/2019

EPD: software accelerator Application Use Exec Env guest vCrypto Initialization phase sio vHost-user SRL SAL host Crypto sw Accelerator device 21/10/2019

EPD: software accelerator as a plugin Application Use Exec Env guest vCrypto Initialization phase sw sio vHost-user SRL SAL host Crypto sw Accelerator device 21/10/2019

EPD: accelerator specific software accelerator as a plugin Application Use Need: - Security policies - Trust model Native access is not direct access Performance & Portability Exec Env guest vCrypto Initialization phase assw + VF sio vHost-user SRL SAL host Crypto assw hio Accelerator HW Crypto device 21/10/2019

Virtio-[ipsec|crypto|compression]

Choice Virtio-ipsec Virtio-crypto Virtio-compression Linux does not have a standard framework for IPSec offload, is there a simple way to build something? Windows has a standard IPSec offload, do we have the skills to build a virtio driver for Windows ? Virtio-crypto Linux has a framework:implement guest Linux kernel driver, implement qemu kernel virtio backend Virtio-compression Linux has a compressin hardware framework that could be used for storage compression 21/10/2019

Virtio-XXX (XXX in software) Guest Linux kernel driver Virtio extensions (device number…) Driver coding Host backend Only software compression Kernel Qemu object 21/10/2019

Virtio-XXX with hardware support Host backend Hardware support Vhost-user acceleration ? 21/10/2019

EPD-XXX software plugin Guest side Plugin framework Host side Pluginize compression code 21/10/2019

EPD-XXX native hardware access plugin Guest side Plugin framework extension Host side Plugin framework framework SR-IOV VF passing Execution Environment rexposing Virtio functions System functions (+memory,DMA…) Hardware access functions (PCI stuff) Synchronization functions (spinlocks…) 21/10/2019

Thank you