Linux

Linux内核IOMMU与DMA子系统深度剖析:设备直通、地址映射与安全性隔离工程实战

深度剖析Linux内核IOMMU子系统的完整架构:涵盖Intel VT-d/AMD-Vi硬件原理、DMAR ACPI表解析、DMA重映射机制、VFIO用户态设备直通框架、中断重映射与Posted Interrupt虚拟化处理、ATS/PRI地址翻译服务、IOMMU分组管理、SWIOTLB bounce buffer机制、DMA一致性映射、生产环境设备直通配置与调优实践,以及IOMMU在KVM虚拟化和容器安全中的关键应用。

Linux KVM Virtualization Deep Dive: From Hardware Extensions to Full-Stack Hypervisor Engineering

Deep dive into Linux KVM virtualization: from Intel VT-x/AMD-V hardware extensions to VMCS/VMCB structures, EPT/NPT two-dimensional paging, QEMU device emulation, VirtIO paravirtualization and VFIO/SR-IOV pass-through, live migration algorithms, and confidential computing with SEV-SNP. Production performance optimization and real-world case studies from AWS Nitro.