←back to thread

39 points todsacerdoti | 3 comments | | HN request time: 0.609s | source
1. Jealous8 ◴[] No.44570196[source]
Impressive deep dive, this classic ASPLOS paper shows that early hardware virtualization support (like Intel VT-x) didn’t outperform VMware's binary-translated software VMM due to high VM‑exit overheads and rigid models/

The obvious takeaway? Flexible software optimizations often beat hardware if exits are too heavy or inflexible. Makes me wonder: with modern nested virtualization and microarchitectural improvements, are we finally seeing hardware VMMs that consistently match or exceed software VMMs?

replies(2): >>44570926 #>>44571225 #
2. justincormack ◴[] No.44570926[source]
We have also worked out how to vmexit less, eg more effective ways to do IO.
3. throw7484485 ◴[] No.44571225[source]
Hardware virtualization is cheating by using unsecure enhancements. Like 90% of existing CPUs have security vulnerabilities, that must be patched in OS.

We can have this discussion when hardware gets a few years without major security flaw!