Comments (6)
Nitro's performance is impacted by mutliple factors
- the interception of the syscalls themselves, which triggers an VM_EXIT everytime the instruction is executed on the CPU
- the VCPU execution being blocked until the userland component listens for the next event and get them
- the context switch to userland
- the processing of the event by the Nitro framework (Python, LibVMI caches being flushed, etc)
There is nothing you can do on 1.
We already improved the performance in kernel by adding the syscall filters, so the VM will continue it's execution immediately if the syscall is not part of the set syscalls that you are looking for.
You can improve how the events are delivered on 2 with an even based mechanism, and not a polling as we do right now.
However there is nothing you can do about the fact that the VM is paused while an event is processed.
If you change that, the memory will not be consistent.
from nitro.
Hello,i want to improve the performance of vm,so i put syscall event in a queue,then i use a thread to do backend,but it can only get syscall information of swapper and bash,besides it losts many process information,at last it reports a glib error,is my method wrong?If worng,how can i solve it?
from nitro.
Is Nitro running faster with your Thread and Queue ?
Because I don't understand why you made the modifications.
You are introducing synchronisation issues, since the main loop just puts the events in the queue and continues the execution, while your thread consumes the events and reads the memory a bit later.
Therefore the memory access is not consistent.
from nitro.
Yes,Nitro running faster with my thread and queue.How can i keep memory access consistent when use one thread get event and one thread backend event?
from nitro.
You can't, or you have to reintroduce synchronisation, which will ruin the threads modification
from nitro.
Hello,i want to know in addition to matching the PGD with the CR3 register, is there any other way to find the process that currently generates the system call?I want to use rsp register to get current process's task_struct,but as syscall and sysret both happen in user mode,so i can only get user stack base address not kernel stack address.
from nitro.
Related Issues (20)
- Configuration Format
- Use case planning HOT 3
- Backend dispatch_hook exception handling HOT 2
- Minor mistake in libvmi.py HOT 1
- problem about the nitro/readme.md HOT 2
- Some questions about requirements! HOT 1
- Question about setup test vm. HOT 22
- A question about get syscall argument value. HOT 3
- Invalid Qemu command line argument definitions in domain template HOT 6
- Questions about realization of nitro!
- Finding process in kernel mode HOT 5
- process_event() will not necessarly return the right syscall HOT 1
- nitro can hook the function which from user level?
- what's the exactly combination to use nitro? HOT 3
- RuntimeError:Process not found HOT 4
- Why is the name of syscall unknown? HOT 5
- Can Nitro extract the API in windows DLL?
- No module named 'nitro.libvmi'
- RuntimeError: Error: fail to attach to the VM
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nitro.