Hypervisor-enforced self encrypting memory in computing fabric

A system comprising:

• one or more host computing platforms;
• a plurality of virtual partitions instantiated across the one or more host computing platforms, each of the plurality of virtual partitions allocated computing resources of the one or more host computing platforms, the plurality of virtual partitions including a virtual partition allocated memory from the one or more host computing platforms, the memory associated with an address range, wherein the address range includes one or more memory pages included in an extended page table;
• a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of virtual partitions, the hypervisor configured to, based on receipt at a virtual partition of a memory operation including an address within the address range from an application executing within a second virtual partition included among the plurality of virtual partitions, the second virtual partition being different from the virtual partition:
• issue an indication that the memory operation is occurring at an encrypted memory location, wherein the indication that the memory operation is occurring at an encrypted memory location is triggered by an extended page fault violation;
• perform the memory operation;
• and
• perform, via the hypervisor, an encryption operation on data associated with the memory operation.

A system for managing secured memory in a computing fabric, the system comprising:

• a programmable circuit of a host computing platform within the computing fabric;
• a memory communicatively connected to the programmable circuit, the memory storing computer-executable instructions which, when executed, cause the computing platform to perform:
• allocating memory of one or more host computing systems in the computing fabric to a virtual partition, the virtual partition included among a plurality of virtual partitions, the computing fabric including a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of virtual partitions;
• defining an address range associated with the memory allocated to the virtual partition, wherein the address range includes one or more memory pages included in an extended page table;
• receiving a memory operation including an address within the address range from an application executing within a second virtual partition included among the plurality of virtual partitions, the second virtual partition being different from the virtual partition;
• based on the memory operation including an address within the address range, issuing, by the hypervisor, an indication that the memory operation is occurring at an encrypted memory location, wherein the indication that the memory operation is occurring at an encrypted memory location is triggered by an extended page fault violation;
• performing the memory operation;
• and
• performing, via the hypervisor, an encryption operation on data associated with the memory operation.