Direct storage access method and device and related equipment

Abstract

The embodiment of the invention provides a direct storage access method and device and related equipment, and the method comprises the steps: obtaining configuration request information which at leastcomprises a first HPA corresponding to a first encrypted memory page requested by an encrypted virtual machine for DMA; based on the configuration request information, configuring a target DMA tableentry corresponding to the first HPA in a DMA table of a memory controller, and at least recording the first HPA and a virtual machine identifier of the encrypted virtual machine by the target DMA table entry, so that when the encrypted virtual machine initiates DMA based on the first HPA, the memory controller calls a key bound with the virtual machine identifier based on the target DMA table entry to encrypt and decrypt the data in the first encrypted memory page. According to the method of the invention, direct data transmission can be carried out between the encrypted virtual machine and the DMA equipment, and the DMA efficiency is improved.

Description

technical field [0001] The embodiments of the present application relate to the technical field of virtual machines, and in particular to a direct storage access method, device and related equipment. Background technique [0002] Through virtualization technology (Virtualization), the host can virtualize multiple virtual machines (VirtualMachine, VM), so as to efficiently utilize the hardware resources of the host; the virtualized virtual machines can allocate virtual machine memory space in the physical memory, each The virtual machine memory space of the virtual machine is mainly used for task consumption and to support virtualization. [0003] In order to protect the virtual machine data in the virtual machine memory space, the virtual machine memory space of some or all virtual machines can be encrypted by using security virtualization technology. The encrypted virtual machine memory space can be called encrypted memory space. The virtual machine can be called an encryp...

AI Technical Summary

Problems solved by technology

[0003] In order to protect the virtual machine data in the virtual machine memory space, the virtual machine memory space of some or all virtual machines can be further encrypted by using the security virtualization technology, wherein, The encrypted virtual machine memory space can be called an encrypted memory space, and the corresponding virtual machine can be called an encrypted virtual machine; the virtual machine itself has a complete computer system, and it also needs to communicate with external devices (such as hard disks, network cards, mice, keyboards, etc.) Under the secure virtualization technology, when the encrypted virtual machine is connected to an external DMA (Direct Memory Access, Direct Memory Access) device, since the data in the encrypted memory space of the encrypted virtual machine is in an encrypted state, this causes the encrypted virtual machine to The virtual machine and the DMA device cannot use the encrypted data for direct data transmission, so how to provide an improved solution so that the encrypted virtual machine and the DMA device can perform direct data transmission has become a technical problem that those skilled in the art need to solve urgently

Images