VirtualizationLinux教学课件.ppt

RHEL Clustering Storage Management Virtualization Rss, page cache, anon page Process monitor Rss, page cache, anon page Process monitor HostOS 普通指令 特权指令 CPU: 全量CPU时间片 内存：连续、全部内存空间 (0x0000, ) I/O: 全部可用IO CPU虚拟化 基于“二进制翻译(Binary Translation)”技术的完全虚拟化 操作系统辅助的虚拟化，也即半虚拟化(paravirtualization)或准虚拟化 硬件辅助的虚拟化 Binary Translation (BT) 半虚拟化(Paravirtualization) 硬件辅助的虚拟化 内存虚拟化 Intel和AMD分别通过EPT(Extended Page Tables)和NPT(Nested Page Tables)为虚拟化应用提升影子MMU的性能，并通过标记(tagged)TLB来避免虚拟机切换时频繁清写(flush)TLB以提高TLB缓存的命中率。 IO虚拟化 Hosted VMM 虚拟化模型 Vmware workstattion, VMWare Server VMWare ESX, VMWare ESXi KVM: Kernel-based Virtual Machine 基于内核的虚拟机 cywin Container: OpenVZ 模拟 基于用户空间的设备模拟 半虚拟化 IO透传 Xen Xen Arch Xcp Linux ? OS Xen /etc/grub.conf Kernel /xen.gz Module /vmlinuz Mouule /initrd Full Virt Para Virt Dom0 Kernel Dom0 Kernel (2) DomU Kernel Xen Guest File network rootfs Taget, lun 桥接 路由模式 NAT模式 伪网络接口(dummy0) 伪网桥 使用brctl命令创建桥接设备 # brctl addbr dumbr0 # brctl setfd dumbr0 0 # ip link set dumbr0 up vif = [ ‘bridge=dumbr0’, ] KVM KVM架构 virtio KVM管理工具 NAT模型（NAT Mode） NAT实现的虚拟网络 路由模型 上图实现的网络模型 隔离模型 桥接模型 多路桥接 Xen is a virtual machine monitor (hypervisor) that allows you to use one physical computer to run many virtual computers Virtual machine monitors provide a convenient way to use the same physical computer hardware for many different tasks The hypervisor controls the underlying hardware, allowing it to be used by many guest systems at once, and gives each guest system the illusion that it is running on its own private hardware The hypervisor abstracts the physical resources of the host computer into discrete virtual counterparts that can be allocated for use by individual guests Virtual guests treat their virtual hardware as if it were real, and the hypervisor ensures that this illusion is seamless Additionally, hypervisors must ensure some level of isolation between guests In a way, hypervisors act as both magician and traffic cop Virtual machine monitors also provide a unifo