Apparatus and method thereof for efficient execution of a guest in a virtualized environment
AssigneeRavello Systems Ltd.
InventorsIzik Eidus, Leonid Shatz, Michael Rapoport, Alexander Fishman
Life of this patent
Estimating the term…
Abstract
A method for efficient execution of a guest in a virtualized computing environment is provided. The method comprises causing an execution of at least one virtual machine on a computing hardware, the virtual machine executes a hypervisor in a first security ring; and causing an execution of a single guest program on one of the at least one virtual machines, the single guest program comprises a kernel being executed in the first security ring and at least one application being executed in a second security ring.
Claims14
An apparatus operating in a virtualized environment, comprising:
- a processor;
- and
- a memory coupled to the processor configured to store at least a first set of instructions for execution of at least one virtual machine by the processor, wherein each of the at least one virtual machine executes a single hypervisor that is being executed in a first security ring, the memory further stores a second set of instructions for execution of a single guest program by the processor over each of the at least one virtual machine, the guest program comprises a single kernel and at least one application executed therein,
- wherein the single kernel of the single guest program is executed in the first security ring with the single hypervisor and the at least one application of the single guest program is executed in a second security ring, wherein the first security ring is Ring 0,
- wherein an instruction issued by the at least one application of the single guest program is executed without trapping the single hypervisor, wherein the instruction requires intervention by the kernel of the single guest program and the single hypervisor, and wherein the single hypervisor runs the single guest program in the first security ring.
A method for efficient execution of a guest in a virtualized computing environment comprising:
- causing an execution of at least one virtual machine on a computing hardware, the virtual machine executes a single hypervisor in a first security ring;
- causing an execution of a single guest program on each of the at least one virtual machines, the single guest program comprises a single kernel being executed in the first security ring and at least one application being executed in a second security ring, wherein the first security ring is Ring 0;
- and
- causing an execution of an instruction issued by the at least one application of the single guest program without trapping the single hypervisor, wherein the instruction requires intervention by of the kernel of the single guest program and the single hypervisor, wherein the single hypervisor runs the single guest program in the first security ring.
Dependencies are inferred from the claim text.