Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-18 Thread Evgeniy Polyakov
Hi Gleb. On Wed, Dec 17, 2008 at 04:31:46PM +0200, Gleb Natapov (g...@redhat.com) wrote: > Here it is. Sorry it is not in a patch format yet, but it gives > general idea how it looks. The problem with connector is that > we need different IDX for different channels and there is no way > to dynami

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-17 Thread Gleb Natapov
On Wed, Dec 17, 2008 at 12:25:32AM +0300, Evgeniy Polyakov wrote: > On Tue, Dec 16, 2008 at 08:57:27AM +0200, Gleb Natapov (g...@redhat.com) > wrote: > > > Another approach is to implement that virtio backend with netlink based > > > userspace interface (like using connector or genetlink). This do

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-16 Thread Dor Laor
Evgeniy Polyakov wrote: On Tue, Dec 16, 2008 at 08:57:27AM +0200, Gleb Natapov (g...@redhat.com) wrote: Another approach is to implement that virtio backend with netlink based userspace interface (like using connector or genetlink). This does not differ too much from what you have with specia

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-16 Thread Evgeniy Polyakov
On Tue, Dec 16, 2008 at 08:57:27AM +0200, Gleb Natapov (g...@redhat.com) wrote: > > Another approach is to implement that virtio backend with netlink based > > userspace interface (like using connector or genetlink). This does not > > differ too much from what you have with special socket family, b

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Gleb Natapov
On Tue, Dec 16, 2008 at 02:45:11AM +0300, Evgeniy Polyakov wrote: > Hi Anthony. > > On Mon, Dec 15, 2008 at 05:01:14PM -0600, Anthony Liguori > (anth...@codemonkey.ws) wrote: > > Yes, and I went down the road of using a dedicated network device and > > using raw ethernet as the protocol. The th

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Herbert Xu
Anthony Liguori wrote: > > If we used TCP, we don't have a useful TCP/IP stack in QEMU, so we'd > have to inject that traffic into the host Linux instance, and then > receive the traffic in QEMU. Besides being indirect, it has some nasty > security implications that I outlined in my response

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Dor Laor
Evgeniy Polyakov wrote: On Mon, Dec 15, 2008 at 05:08:29PM -0600, Anthony Liguori (anth...@codemonkey.ws) wrote: The KVM model is that a guest is a process. Any IO operations original from the process (QEMU). The advantage to this is that you get very good security because you can use thi

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Evgeniy Polyakov
On Mon, Dec 15, 2008 at 05:08:29PM -0600, Anthony Liguori (anth...@codemonkey.ws) wrote: > The KVM model is that a guest is a process. Any IO operations original > from the process (QEMU). The advantage to this is that you get very > good security because you can use things like SELinux and si

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Evgeniy Polyakov
Hi Anthony. On Mon, Dec 15, 2008 at 05:01:14PM -0600, Anthony Liguori (anth...@codemonkey.ws) wrote: > Yes, and I went down the road of using a dedicated network device and > using raw ethernet as the protocol. The thing that killed that was the > fact that it's not reliable. You need somethi

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Jeremy Fitzhardinge
Anthony Liguori wrote: Jeremy Fitzhardinge wrote: Anthony Liguori wrote: That seems unnecessarily complex. Well, the simplest thing is to let the host TCP stack do TCP. Could you go into more detail about why you'd want to avoid that? The KVM model is that a guest is a process. Any I

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Anthony Liguori
David Miller wrote: From: Anthony Liguori Date: Mon, 15 Dec 2008 17:01:14 -0600 No, TCP falls under the not simple category because it requires the backend to have access to a TCP/IP stack. I'm at a loss for words if you need TCP in the hypervisor, if that's what you're implying here

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Stephen Hemminger
On Mon, 15 Dec 2008 17:01:14 -0600 Anthony Liguori wrote: > David Miller wrote: > > From: Anthony Liguori > > Date: Mon, 15 Dec 2008 14:44:26 -0600 > > > > > >> We want this communication mechanism to be simple and reliable as we > >> want to implement the backends drivers in the host userspa

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread David Miller
From: Anthony Liguori Date: Mon, 15 Dec 2008 17:01:14 -0600 > No, TCP falls under the not simple category because it requires the > backend to have access to a TCP/IP stack. I'm at a loss for words if you need TCP in the hypervisor, if that's what you're implying here. You only need it in the g

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Anthony Liguori
Jeremy Fitzhardinge wrote: Anthony Liguori wrote: That seems unnecessarily complex. Well, the simplest thing is to let the host TCP stack do TCP. Could you go into more detail about why you'd want to avoid that? The KVM model is that a guest is a process. Any IO operations original f

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Anthony Liguori
David Miller wrote: From: Anthony Liguori Date: Mon, 15 Dec 2008 14:44:26 -0600 We want this communication mechanism to be simple and reliable as we want to implement the backends drivers in the host userspace with minimum mess. One implication of your statement here is that TCP is u

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Jeremy Fitzhardinge
Anthony Liguori wrote: Jeremy Fitzhardinge wrote: Each of these sockets are going to be connected to a backend (to implement guest<=>copy/paste for instance). We want to implement those backends in userspace and preferably in QEMU. Using some raw protocol over ethernet means you don't hav

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread David Miller
From: Anthony Liguori Date: Mon, 15 Dec 2008 14:44:26 -0600 > We want this communication mechanism to be simple and reliable as we > want to implement the backends drivers in the host userspace with > minimum mess. One implication of your statement here is that TCP is unreliable. That's absolute

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Anthony Liguori
David Miller wrote: From: Anthony Liguori Date: Mon, 15 Dec 2008 09:02:23 -0600 There is already an AF_IUCV for s390. This is a scarecrow and irrelevant to this discussion. And this is exactly why I asked that any arguments in this thread avoid talking about virtualization technolog

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread David Miller
From: Anthony Liguori Date: Mon, 15 Dec 2008 09:02:23 -0600 > There is already an AF_IUCV for s390. This is a scarecrow and irrelevant to this discussion. And this is exactly why I asked that any arguments in this thread avoid talking about virtualization technology and why it's "special." Thi

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Anthony Liguori
Jeremy Fitzhardinge wrote: Each of these sockets are going to be connected to a backend (to implement guest<=>copy/paste for instance). We want to implement those backends in userspace and preferably in QEMU. Using some raw protocol over ethernet means you don't have reliability. If you use

RE: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Itamar Heim
> -Original Message- > From: kvm-ow...@vger.kernel.org [mailto:kvm-ow...@vger.kernel.org] On > Behalf Of Jeremy Fitzhardinge > The trouble is that it presumes that the host and guest (or whoever the > endpoints are) are on the same physical machine and will remain that > way. Given that

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Jeremy Fitzhardinge
Anthony Liguori wrote: David Miller wrote: From: Gleb Natapov Date: Sun, 14 Dec 2008 13:50:55 +0200 It is undesirable to use TCP/IP for this purpose since network connectivity may not exist between host and guest and if it exists the traffic can be not routable between host and gue

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread Anthony Liguori
David Miller wrote: From: Gleb Natapov Date: Sun, 14 Dec 2008 13:50:55 +0200 It is undesirable to use TCP/IP for this purpose since network connectivity may not exist between host and guest and if it exists the traffic can be not routable between host and guest for security reasons or TCP/I

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-15 Thread David Miller
From: Gleb Natapov Date: Mon, 15 Dec 2008 09:48:19 +0200 > On Sun, Dec 14, 2008 at 10:44:36PM -0800, David Miller wrote: > > You guys really need to rethink this. Either a stream protocol is a > > workable solution to your problem, or it isn't. > > Stream protocol is workable solution for us, bu

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-14 Thread Gleb Natapov
On Sun, Dec 14, 2008 at 10:44:36PM -0800, David Miller wrote: > From: Gleb Natapov > Date: Sun, 14 Dec 2008 13:50:55 +0200 > > > It is undesirable to use TCP/IP for this purpose since network > > connectivity may not exist between host and guest and if it exists the > > traffic can be not routabl

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-14 Thread David Miller
From: Gleb Natapov Date: Sun, 14 Dec 2008 13:50:55 +0200 > It is undesirable to use TCP/IP for this purpose since network > connectivity may not exist between host and guest and if it exists the > traffic can be not routable between host and guest for security reasons > or TCP/IP traffic can be f

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-14 Thread Gleb Natapov
Hi Evgeniy, On Sun, Dec 14, 2008 at 03:23:20PM +0300, Evgeniy Polyakov wrote: > On Sun, Dec 14, 2008 at 01:50:55PM +0200, Gleb Natapov (g...@redhat.com) > wrote: > > There is a need for communication channel between host and various > > agents that are running inside a VM guest. The channel will

Re: [PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-14 Thread Evgeniy Polyakov
Hi Gleb. On Sun, Dec 14, 2008 at 01:50:55PM +0200, Gleb Natapov (g...@redhat.com) wrote: > There is a need for communication channel between host and various > agents that are running inside a VM guest. The channel will be used > for statistic gathering, logging, cut & paste, host screen resolutio

[PATCH] AF_VMCHANNEL address family for guest<->host communication.

2008-12-14 Thread Gleb Natapov
There is a need for communication channel between host and various agents that are running inside a VM guest. The channel will be used for statistic gathering, logging, cut & paste, host screen resolution changes notifications, guest configuration etc. It is undesirable to use TCP/IP for this purp