Abstract: Mainstream device emulation models suffer from low performance and non-security. A novel high performance device virtualization of directly assigning model with hardware IOMMU support was presented, and was implemented as the display device solution on Xen. This model is more secure than paravirtual device model based IOVM architecture. Viewperf benchmark test result indicates this implementation's performance is close to nonvirutal system, much better than traditional device emulation model.

Key words: device virtualization, device model, I/O Memeory Management Unit (IOMMU), Xen, security

摘要： 针对现有设备虚拟化模型存在性能和安全性等方面的不足，提出了一种基于硬件IOMMU的高效且安全的设备直接分配模型，并在Xen中以显示设备为例实现了该方案。该模型安全性优于基于IOVM架构的泛虚拟化设备模型。基准测试工具Viewperf测试结果表明,该方案在性能上接近于非虚拟化平台，明显优于通常的设备模拟模型。

关键词: 设备虚拟化, 设备模型, 输入输出存储器管理单元, Xen, 安全性