Xen
Original author(s) | Keir Fraser, Steven Hand, Ian Pratt, University of Cambridge Computer Laboratory |
---|---|
Developer(s) | Linux Foundation |
Initial release | 2003 |
Stable release | 4.6[1]
/ October 13, 2015 |
Preview release | 4.6.1[2]
/ February 15, 2016 |
Repository | |
Type | Hypervisor |
License | GNU GPL version 2 |
Website | www |
Xen Project (pronounced as /ˈzɛn/ /prˈɒdʒɛkt/) is a hypervisor using a microkernel design, providing services that allow multiple computer operating systems to execute on the same computer hardware concurrently.
The University of Cambridge Computer Laboratory developed the first versions of Xen. The Xen Project community develops and maintains Xen Project as free and open-source software, subject to the requirements of the GNU General Public License (GPL), version 2. Xen Project is currently available for the IA-32, x86-64 and ARM instruction sets.
Software architecture
Xen Project runs in a more privileged CPU state than any other software on the machine.
Responsibilities of the hypervisor include memory management and CPU scheduling of all virtual machines ("domains"), and for launching the most privileged domain ("dom0") - the only virtual machine which by default has direct access to hardware. From the dom0 the hypervisor can be managed and unprivileged domains ("domU") can be launched.[3]
The dom0 domain is typically a version of Linux or BSD. User domains may either be traditional operating systems, such as Microsoft Windows under which privileged instructions are provided by hardware virtualization instructions (if the host processor supports x86 virtualization, e.g., Intel VT-x and AMD-V),[4] or para-virtualized operating systems whereby the operating system is aware that it is running inside a virtual machine, and so makes hypercalls directly, rather than issuing privileged instructions.
Xen Project boots from a bootloader such as GNU GRUB, and then usually loads a paravirtualized host operating system into the host domain (dom0).
History
Xen Project originated as a research project at the University of Cambridge, led by Ian Pratt, senior lecturer at Cambridge who co-founded XenSource, Inc. with Simon Crosby also of Cambridge University. The first public release of Xen was made in 2003.
Xen Project has been supported originally by XenSource Inc., and since the acquisition of XenSource by Citrix in October 2007. This organisation supports the development of the free software project and also sells enterprise versions of the software.
On 22 October 2007, Citrix Systems completed its acquisition of XenSource,[5] and the Xen Project moved to the xen.org domain. This move had started some time previously, and made public the existence of the Xen Project Advisory Board (Xen AB), which had members from Citrix, IBM, Intel, Hewlett-Packard, Novell, Red Hat, Sun Microsystems and Oracle. The Xen Advisory Board advises the Xen Project leader and is responsible for the Xen trademark,[6] which Citrix has freely licensed to all vendors and projects that implement the Xen hypervisor.[7]
Citrix has also used the Xen brand itself for some proprietary products unrelated to Xen, including at least "XenApp" and "XenDesktop".
On 15 April 2013, it was announced that the Xen Project was moved under the auspices of the Linux Foundation as a Collaborative Project.[8] The Linux Foundation launched a new trademark for "Xen Project" to differentiate the project from any commercial use of the older "Xen" trademark. A new community website was launched at xenproject.org[9] as part of the transfer. Project members at the time of the announcement included: Amazon, AMD, Bromium, CA Technologies, Calxeda, Cisco, Citrix, Google, Intel, Oracle, Samsung, and Verizon.[10] The Xen project itself is self-governing.[11]
Release history for Xen Project (upstream project)
Version | Release date | Notes |
---|---|---|
1.0 | October 2, 2003[12][13] | |
2.0 | November 5, 2004[14] | |
3.0 | December 5, 2005[15][16] |
The releases up to 3.0.4 also added:
|
3.1 | May 18, 2007[20] | Live migration for HVM guests, XenAPI |
3.2 | January 17, 2008[21] | PCI passthrough and ACPI S3 standby mode for the host system. |
3.3 | August 24, 2008[22] | Improvements for the PCI passthrough and the power management. |
3.4 | May 18, 2009[23] | Contains a first version of the "Xen Client Initiative", shortly XCI. |
4.0 | April 7, 2010[24] | Makes it possible to use a dom0 Linux kernel, which has been implemented by using PVOps. A Linux kernel of version 2.6.31 has been modified for this purpose, because the official Linux kernel actually does not support the usage as dom0 kernel (date July 2010).[25] |
4.1 | March 25, 2011[26] | Some of the improvements: Support for more than 255 processors, better stability. Linux kernel v2.6.37 and onward support usage as dom0 kernel.[27] |
4.2 | September 8, 2012[1] | XL became the default toolstack. Support for up to 4095 host processors and up to 512 guest processors. |
4.3 | July 9, 2013[28] | Experimental ARM support. NUMA-aware scheduling. Support for Open vSwitch. |
4.4 | March 10, 2014[29] | Solid libvirt support for libxl, new scalable event channel interface, hypervisor ABI for ARM declared stable, Nested Virtualization on Intel hardware.[30][31] |
4.5 | January 17, 2015[32] | With 43 major new features, 4.5 includes the most updates in the project’s history.[32] |
4.6 | October 13, 2015[1] | Focused on improving code quality, security hardening, enablement of security appliances, and release cycle predictability.[1] |
Xen in Linux distributions and Linux upstream
Since version 3.0 of the Linux kernel, Xen support for dom0 and domU exists in the mainline kernel.[33]
Uses
Internet hosting service companies use hypervisors to provide virtual private servers. Amazon EC2, IBM SoftLayer,[34] Liquid Web, Fujitsu Global Cloud Platform,[35] Linode, OrionVM[36] and Rackspace Cloud use Xen as the primary VM hypervisor for their product offerings.[37]
Virtual machine monitors (also known as hypervisors) also often operate on mainframes and large servers running IBM, HP, and other systems.[citation needed] Server virtualization can provide benefits such as:
- consolidation leading to increased utilization
- rapid provisioning
- dynamic fault tolerance against software failures (through rapid bootstrapping or rebooting)
- hardware fault tolerance (through migration of a virtual machine to different hardware)
- the ability to securely separate virtual operating systems
- the ability to support legacy software as well as new OS instances on the same computer
Xen's support for virtual machine live migration from one host to another allows workload balancing and the avoidance of downtime.
Virtualization also has benefits when working on development (including the development of operating systems): running the new system as a guest avoids the need to reboot the physical computer whenever a bug occurs. Sandboxed guest systems can also help in computer-security research, allowing study of the effects of some virus or worm without the possibility of compromising the host system.
Finally, hardware appliance vendors may decide to ship their appliance running several guest systems, so as to be able to execute various pieces of software that require different operating systems.
Technology
Types of virtualization
Xen supports five different approaches to running the guest operating system: HVM (hardware virtual machine), HVM with PV drivers, PVHVM (HVM with PVHVM drivers), PVH (PV in an HVM container) and PV (paravirtualization).[38]
Paravirtualization - modified guests
Xen supports a form of virtualization known as paravirtualization, in which guests run a modified operating system. The guests are modified to use a special hypercall ABI, instead of certain architectural features.
Through paravirtualization, Xen can achieve high performance even on its host architecture (x86) which has a reputation for non-cooperation with traditional virtualization techniques.[39][40]
Xen can run paravirtualized guests ("PV guests" in Xen terminology) even on CPUs without any explicit support for virtualization.
Paravirtualization avoids the need to emulate a full set of hardware and firmware services, which makes a PV system simpler to manage and reduces the attack surface exposed to potentially malicious guests.
On 32-bit x86, the Xen host kernel code runs in Ring 0, while the hosted domains run in Ring 1 (kernel) and Ring 3 (applications).
Hardware-assisted virtualization, allowing for unmodified guests
CPUs that support virtualization make it possible to support unmodified guests, including proprietary operating systems (such as Microsoft Windows). This is known as hardware-assisted virtualization, however in Xen this is known as hardware virtual machine (HVM).
HVM extensions provide additional execution modes, with an explicit distinction between the most-privileged modes used by the hypervisor with access to the real hardware (called "root mode" in x86) and the less-privileged modes used by guest kernels and applications with "hardware" accesses under complete control of the hypervisor (in x86, known as "non-root mode"; both root and non-root mode have Rings 0–3).
Both Intel and AMD have contributed modifications to Xen to support their respective Intel VT-x and AMD-V architecture extensions.[41] Support for ARM v7A and v8A virtualization extensions came with Xen 4.3.[42]
HVM extensions also often offer new instructions to support direct calls by a paravirtualized guest/driver into the hypervisor, typically used for I/O or other operations needing high performance. These allow HVM guests with suitable minor modifications to gain many of the performance benefits of paravirtualised I/O.
In current versions of Xen (up to 4.2) only fully virtualised HVM guests can make use of hardware support for multiple independent levels of memory protection and paging. As a result, for some workloads, HVM guests with PV drivers (also known as PV-on-HVM, or PVH) provide better performance than pure PV guests.
Xen HVM has device emulation based on the QEMU project to provide I/O virtualization to the virtual machines. The system emulates hardware via a patched QEMU "device manager" (qemu-dm) daemon running as a backend in dom0. This means that the virtualized machines see an emulated version of a fairly basic PC. In a performance-critical environment, PV-on-HVM disk and network drivers are used during normal guest operation, so that the emulated PC hardware is mostly used for booting.
Virtual machine migration
Administrators can "live migrate" Xen virtual machines between physical hosts across a LAN without loss of availability. During this procedure, the LAN iteratively copies the memory of the virtual machine to the destination without stopping its execution. The process requires a stoppage of around 60–300 ms to perform final synchronization before the virtual machine begins executing at its final destination, providing an illusion of seamless migration. Similar technology can serve to suspend running virtual machines to disk, "freezing" their running state for resumption at a later date.
Target processors
The Xen hypervisor has been ported to a number of processor families.
- Intel: IA-32, IA-64 (before version 4.2[43]), x86-64
- PowerPC: previously supported under the XenPPC project, no longer active after Xen 3.2[44]
- ARM: previously supported under the XenARM project for older versions of ARM without virtualization extensions, such as the Cortex-A9. Currently[when?] supported since Xen 4.3 for newer versions of the ARM with virtualization extensions, such as the Cortex-A15.
- MIPS: XLP832 experimental port[45]
Scalability
Xen can scale to 4095 physical CPUs, 256 VCPUs per HVM guest, 512 VCPUs per PV guest, 16 TB of RAM per host, and up to 1 TB of RAM per HVM guest or 512 GB of RAM per PV guest.[46]
Hosts
Xen can be shipped in a dedicated virtualization platform, such as Citrix XenServer Enterprise Edition (formerly XenSource's XenEnterprise).
Alternatively, Xen is distributed as an optional configuration of many standard operating systems. Xen is available for and distributed with:
- Alpine Linux offers a minimal dom0 system (Busybox, UClibc) that can be run from removable media, like USB sticks.
- Debian GNU/Linux (since version 4.0 "etch") and many of its derivatives
- FreeBSD 11 includes experimental host support.[47]
- Gentoo and Arch Linux both have packages available to support Xen.[48]
- Mageia (since version 4)
- NetBSD 3.x. includes host support for Xen 2, with host support for Xen 3.0 available from NetBSD 4.0.[49]
- OpenSolaris-based distributions can function as dom0 and domU from Nevada build 75 onwards.
- openSUSE 10.x to 12.x;[50] only 64-bit hosts are supported since 12.1
- Qubes OS for desktop usage
- SUSE Linux Enterprise Server (since version 10)
- Solaris (since 2013 with Oracle VM Server for x86, before with Sun xVM)
- Ubuntu (since 12.04 "Precise Pangolin"; also 8.04 Hardy Heron, but no dom0-capable kernel in 8.10 Intrepid Ibex until 12.04[51][52])
Guests
Unix-like systems as guests
Guest systems can run fully virtualized (which requires hardware support) or paravirtualised (which requires a modified guest operating system).
Most operating systems which can run on PC can run as a Xen HVM guest.
Additionally the following systems have patches allowing them to operate as paravirtualized Xen guests:
- FreeBSD[53]
- GNU/Hurd (gnumach-1-branch-Xen-branch)
- Linux, paravirtualization integrated in 2.6.23, patches for other versions exist
- MINIX
- NetBSD (NetBSD 2.0 has support for Xen 1.2, NetBSD 3.0 has support for Xen 2.0, NetBSD 3.1 supports Xen 3.0, NetBSD 5.0 features Xen 3.3)
- NetWare (at Brainshare 2005, Novell showed a port that can run as a Xen guest)
- OpenSolaris (See The Xen Community On OpenSolaris)
- OZONE (has support for Xen v1.2)
- Plan 9 from Bell Labs
- OpenBSD, as of 5.9[54]
Microsoft Windows systems as guests
Xen version 3.0 introduced the capability to run Microsoft Windows as a guest operating system unmodified if the host machine's processor supports hardware virtualization provided by Intel VT-x (formerly codenamed Vanderpool) or AMD-V (formerly codenamed Pacifica).
During the development of Xen 1.x, Microsoft Research, along with the University of Cambridge Operating System group, developed a port of Windows XP to Xen — made possible by Microsoft's Academic Licensing Program. The terms of this license do not allow the publication of this port, although documentation of the experience appears in the original Xen SOSP paper.[55]
James Harper and the Xen open-source community have started developing GPL'd Paravirtualisation drivers for Windows. These provide front-end drivers for the Xen block and network devices, and allow much higher disk and network performance for Windows systems running in HVM mode. Without these drivers all disk and network traffic has to be processed through QEMU-DM.[56]
Xen Management Consoles
Third-party developers have built a number of tools (known as Xen Management Consoles) to facilitate the common tasks of administering a Xen host, such as configuring, starting, monitoring and stopping of Xen guests. Examples include:
- the web-based HyperVM
- Web-based ConVirt
- the OpenNebula cloud management toolkit
- On openSUSE YaST and virt-man offer graphical VM management
- Web-based Xen Orchestra
- Openstack natively supports Xen as a Hypervisor/Compute target
- Novell's PlateSpin Orchestrate also manages Xen virtual machines for Xen shipping in SUSE Linux Enterprise Server.
Commercial versions
- Citrix XenServer
- Huawei FusionSphere[57]
- Oracle VM Server for x86
- Thinsy Corporation
- Virtual Iron (discontinued by Oracle)
The Xen hypervisor is covered by the GNU General Public Licence, so all of these versions contain a core of free software with source code. However, many of them contain proprietary additions.
See also
- CloudStack
- Kernel-based Virtual Machine (KVM)
- OpenStack
- Virtual disk image
- tboot, a TXT-based integrity system for the Linux kernel and Xen hypervisor
- VMware ESX
References
- ^ a b c d "Best Quality and Quantity of Contributions in the New Xen Project 4.6 Release". Xenproject.org. 2015-10-13. Retrieved 2015-10-13.
- ^ "Xen Project 4.6.1 Maintenance Release is Available". Xenproject.org. 2016-02-15. Retrieved 2016-02-15.
- ^ "Xen Overview". Retrieved 2015-04-05.
- ^ "OSCompatibility - Xen Project Wiki". Wiki.xenproject.org. 2007-02-08. Retrieved 2013-06-08.
- ^ "Citrix Systems » Citrix Completes Acquisition of XenSource". Citrix Systems. 2007-07-12.
- ^ "Trademark". Xen.org. Retrieved 2012-06-08.
- ^ "Trademark Policy" (PDF) (PDF). Xen.org. 2008-06-01. Retrieved 2013-06-08.
- ^ "Linux Foundation Project". LinuxFoundation.org. Retrieved 2013-05-03.
- ^ "XenProject.org Website". XenProject.org. Retrieved 2013-05-03.
- ^ "Linux Foundation Xen Project Members". XenProject.org. Retrieved 2013-05-03.
- ^ "Project Governance (Updated)". XenProject.org. Retrieved 2013-05-03.
- ^ "Xen:". SourceForge.net. 2003-10-02. Retrieved 2012-10-18.
- ^ Jonathan Corbet (2003-10-02). "The first stable Xen release". Lwn.net. Retrieved 2012-10-18.
- ^ Jonathan Corbet (2004-11-05). "Xen 2.0 released". Lwn.net. Retrieved 2012-10-18.
- ^ Jonathan Corbet (2005-12-06). "Xen 3.0 released". Lwn.net. Retrieved 2012-10-18.
- ^ "Internet Archive Wayback Machine". Web.archive.org. 2005-12-10. Archived from the original on 2005-12-10. Retrieved 2012-10-18.
{{cite web}}
: Cite uses generic title (help) - ^ "AMD SVM Xen port is public". lists.xenproject.org. 2005-12-14. Retrieved 2013-06-08.
- ^ "[Xen-devel] Xen 3.0.3 released! - Xen Source". Lists.xenproject.org. 2006-10-17. Retrieved 2013-06-08.
- ^ "[Xen-devel] FW: Xen 3.0.4 released! - Xen Source". Lists.xenproject.org. 2006-12-20. Retrieved 2013-06-08.
- ^ "[Xen-devel] Xen 3.1 released! - Xen Source". Lists.xenproject.org. 2007-05-18. Retrieved 2013-06-08.
- ^ "Xen 3.2.0 Officially Released : VMblog.com - Virtualization Technology News and Information for Everyone". VMblog.com. Retrieved 2012-10-18.
- ^ "Xen 3.3.0 hypervisor ready for download - The H: Open Source, Security and Development". H-online.com. 2008-08-25. Archived from the original on 14 March 2012. Retrieved 2012-10-18.
- ^ "Xen.org Announces Release Of Xen 3.4 Hypervisor | Citrix Blogs". Community.citrix.com. 2009-05-18. Retrieved 2012-10-18.
- ^ "Virtualisation: Xen is looking to catch up by releasing version 4 - The H Open: News and Features". H-online.com. 2010-04-09. Archived from the original on 14 March 2012. Retrieved 2012-10-18.
- ^ "Xen 4.0 Datasheet" (PDF) (PDF). Xen.org. Retrieved 2012-10-18.
- ^ "Xen 4.1 releases –". Blog.xen.org. 2011-03-25. Retrieved 2012-10-18.
- ^ "XenParavirtOps - Xen Wiki". Wiki.xenproject.org. Retrieved 2013-06-08.
- ^ "Xen 4.3 released! –". Blog.xen.org. 2013-07-09. Retrieved 2013-07-16.
- ^ "Xen 4.4 releases –". Blog.xen.org. 2014-03-10. Retrieved 2014-03-10.
- ^ "Xen Project 4.4 Release Notes". Wiki.xenproject.org. Retrieved 2014-03-10.
- ^ "Xen 4.4 Feature List". Wiki.xenproject.org. Retrieved 2014-03-10.
- ^ a b "Less is More in the New Xen Project 4.5 Release –". Blog.xen.org. 2015-01-15. Retrieved 2015-01-17.
- ^ "Xen celebrates full dom0 and domU support in Linux 3.0 –". Blog.xen.org. 2011-05-30. Retrieved 2012-10-18.
- ^ "CloudLayer Computing vs. Amazon EC2" (PDF) (PDF). Retrieved 2015-04-05.
- ^ Suzanne Tindal (2011-02-28). "Fujitsu's global cloud launches in Aus". ZDNet Australia.
- ^ "Xen Project - Guest VM Images - OrionVM PV-HVM Templates". 2012-04-01. Retrieved 2014-06-27.
- ^ "Cloud FAQ". Rackspace.com. 2011-09-13. Retrieved 2012-10-18.
- ^ Roger Pau Monne. "Xen virtualization on FreeBSD" (PDF) (PDF). Retrieved 2015-04-06.
- ^ Robin and Irvine, "Analysis of the Intel Pentium's Ability to Support a Secure Virtual Machine Monitor", 9th Usenix Security Symposium, 2000
- ^ Gil Neiger, Amy Santoni, Felix Leung, Dion Rodgers, Rich Uhlig. Intel Virtualization Technology: Software-only virtualization with the IA-32 and Itanium architectures, Intel Technology Journal, Volume 10 Issue 03, August 2006.
- ^ Extending Xen with Intel Virtualization Technology, intel.com
- ^ "The ARM Hypervisor - The Xen Project's Hypervisor for the ARM architecture". Retrieved 2015-04-06.
- ^ "Xen 4.2 Feature List - Xen". Wiki.xen.org. 2012-12-17. Retrieved 2014-01-22.
- ^ "XenPPC - Xen Wiki". New-wiki.xen.org. 2010-08-15. Retrieved 2014-01-22.
- ^ Mashable (2012-09-04). "Porting Xen Paravirtualization to MIPS Architecture". Slideshare.net. Retrieved 2014-01-22.
- ^ "Xen Release Features - Xen Project". Wiki.xenproject.org. Retrieved 2012-10-18.
- ^ "Xen - FreeBSD Wiki". wiki.freebsd.org. Retrieved 2015-09-28.
- ^ "AUR (en) - xen". Aur.archlinux.org. Retrieved 2014-07-14.
- ^ "NetBSD/xen". Netbsd.org. Retrieved 2013-06-08.
- ^ "XenDom0Kernels - Xen Wiki". Wiki.xenproject.org. 2011-11-08. Retrieved 2013-06-08.
- ^ "Xen dom0 support in Lucid - Kernel team discussions - ArchiveOrange". Web.archiveorange.com. Retrieved 2014-01-22.
- ^ "Xen - Community Ubuntu Documentation". Help.ubuntu.com. 2012-09-05. Retrieved 2012-10-18.
- ^ "FreeBSD/Xen - FreeBSD Wiki". Wiki.freebsd.org. 2012-06-25. Retrieved 2012-10-18.
- ^ Mike Belopuhov. "OpenBSD Manual Pages - xen(4)". Retrieved 2016-01-14.
- ^ "Xen and the Art of Virtualization" (PDF) (PDF). University of Cambridge SOSP'03 paper. Retrieved 2012-10-18.
- ^ The information on the XenSource wiki seems to be outdated, but newer information is here: "Open Source Windows Paravirtualization Drivers for Xen (GPLPV)". Jolokia Networks. Retrieved 2012-10-18.
- ^ Huawei to virtual world: Give us your desktops and no-one gets hurt
Further reading
- Paul Venezia (April 13, 2011) Virtualization shoot-out: Citrix, Microsoft, Red Hat, and VMware. The leading server virtualization contenders tackle InfoWorld's ultimate virtualization challenge, InfoWorld