1. Virtio-ipsec
F.F. Ozog (6WIND)
v1 (2015/05/29)

2. DPACC virtio deliverable
It’s time to organize as an open SOURCE community
Freescale produced a virtio-ipsec specification
Is virtio-ipsec simpler ? Is virtio-compression even simpler ?
Let’s choose and implement it
We need a dpacc-virtio-[ipsec|crypto|compression] git repository
Who is willing to participate
21/10/2019

3. Reminder
Extensible Paravirtualized Devices

4. EPD: hardware accelerator
Application
Use
Exec Env
guest
vCrypto
Initialization phase
sio
vHost-user
SRL
SAL
host
Crypto
hio
Accelerator
HW Crypto
device
21/10/2019

5. EPD: software accelerator
Application
Use
Exec Env
guest
vCrypto
Initialization phase
sio
vHost-user
SRL
SAL
host
Crypto sw
Accelerator
device
21/10/2019

6. EPD: software accelerator as a plugin
Application
Use
Exec Env
guest
vCrypto
Initialization phase sw
sio
vHost-user
SRL
SAL
host
Crypto sw
Accelerator
device
21/10/2019

7. EPD: accelerator specific software accelerator as a plugin
Application
Use
Need:
- Security policies
- Trust model
Native access is not direct access
Performance & Portability
Exec Env
guest
vCrypto
Initialization phase
assw + VF
sio
vHost-user
SRL
SAL
host
Crypto
assw
hio
Accelerator
HW Crypto
device
21/10/2019

8. Virtio-[ipsec|crypto|compression]

9. Choice Virtio-ipsec Virtio-crypto Virtio-compression
Linux does not have a standard framework for IPSec offload, is there a simple way to build something?
Windows has a standard IPSec offload, do we have the skills to build a virtio driver for Windows ?
Virtio-crypto
Linux has a framework:implement guest Linux kernel driver, implement qemu kernel virtio backend
Virtio-compression
Linux has a compressin hardware framework that could be used for storage compression
21/10/2019

10. Virtio-XXX (XXX in software)
Guest Linux kernel driver
Virtio extensions (device number…)
Driver coding
Host backend
Only software compression
Kernel Qemu object
21/10/2019

11. Virtio-XXX with hardware support
Host backend
Hardware support
Vhost-user acceleration ?
21/10/2019

12. EPD-XXX software plugin
Guest side
Plugin framework
Host side
Pluginize compression code
21/10/2019

13. EPD-XXX native hardware access plugin
Guest side
Plugin framework extension
Host side
Plugin framework framework
SR-IOV VF passing
Execution Environment rexposing
Virtio functions
System functions (+memory,DMA…)
Hardware access functions (PCI stuff)
Synchronization functions (spinlocks…)
21/10/2019

14. Thank you