Multicast live migration for encrypted virtual machines
AssigneeRed Hat, Inc.
InventorsMichael Tsirkin, Andrea Arcangeli
Life of this patent
Estimating the term…
Abstract
A method includes receiving a request to migrate a virtual machine executing on a source host computer system to a first destination host computer system. The method further includes receiving, from the virtual machine executing on the source host computer system, an encryption key specific to the virtual machine. One or more memory pages associated with the virtual machine are encrypted using the encryption key specific to the virtual machine. The method further includes causing the one or more memory pages associated with the virtual machine to be copied to the first destination host computer system.
Claims20
A method comprising:
- receiving, by a processing device of a source host computing system, a request to migrate a virtual machine (VM) running on the source host computer system to a first destination host computer system;
- receiving, by the processing device, from the VM, an encryption key associated with the VM;
- encrypting, using the encryption key, one or more memory pages associated with the VM;
- and
- causing the one or more memory pages to be copied to the first destination host computer system.
A system comprising:
- a memory component;
- and
- a processing device of a destination host computer system, the processing device to:
- receive an encryption key associated with a virtual machine (VM) that is being migrated from a source host computer system to the destination host computer system;
- receive, from the source host computer system, one or more memory pages associated with a virtual machine (VM);
- decrypt, using the encryption key, the one or more memory pages associated with the VM;
- store the one or more memory pages at the memory component;
- and
- execute the VM on the destination host computer system.
A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform a method comprising:
- receiving a request to migrate a virtual machine (VM) running on a source host computer system to a first destination host computer system;
- receiving, from the VM, an encryption key associated with the VM;
- encrypting, using the encryption key, one or more memory pages associated with the VM;
- and
- causing the one or more memory pages to be copied to the first destination host computer system.
Dependencies are inferred from the claim text.