Difference between revisions of "Dom0 Disaggregation"

From Xen
(Add link to project Windsor)
(Add reference to OpenXT)
Line 1: Line 1:
 
==Dom0 Dissaggregation==
 
==Dom0 Dissaggregation==
   
The [[Dom0]] or control domain has traditionally been a monolithic privileged virtual machine. However, the original intention was for Dom0 to be carefully broken into several privileged service domains - termed Dom0 disaggregation. Qubes OS, Citrix XenClient, and Xoar have made the case for more disaggregation of Dom0 for purposes of better security, reliablity, isolation, and auditability.
+
The [[Dom0]] or control domain has traditionally been a monolithic privileged virtual machine. However, the original intention was for Dom0 to be carefully broken into several privileged service domains - termed Dom0 disaggregation. Qubes OS, OpenXT, Citrix XenClient, and Xoar have made the case for more disaggregation of Dom0 for purposes of better security, reliablity, isolation, and auditability.
   
 
[[File:Xoar_architecture.jpg|800px]]
 
[[File:Xoar_architecture.jpg|800px]]
Line 15: Line 15:
 
==References==
 
==References==
   
  +
* http://openxt.org
 
* http://qubes-os.org/Home.html
 
* http://qubes-os.org/Home.html
 
* http://www.cs.ubc.ca/~andy/papers/xoar-sosp-final.pdf
 
* http://www.cs.ubc.ca/~andy/papers/xoar-sosp-final.pdf

Revision as of 18:50, 17 August 2016

Dom0 Dissaggregation

The Dom0 or control domain has traditionally been a monolithic privileged virtual machine. However, the original intention was for Dom0 to be carefully broken into several privileged service domains - termed Dom0 disaggregation. Qubes OS, OpenXT, Citrix XenClient, and Xoar have made the case for more disaggregation of Dom0 for purposes of better security, reliablity, isolation, and auditability.

Xoar architecture.jpg


In Practice

"Although domain 0 disaggregation is not new it is seldom used in practise and much of its use is focussed on providing enhanced security. Citrix XenServer will be moving towards a disaggregated domain 0 in order to provide better security, scalability, performance, reliability, supportability and flexibility."

Project “Windsor”: Domain 0 Disaggregation for XenServerXCP:

References