LCE-EU 2015

The Linux-based Jailhouse hypervisor project was started to provide strict partitioning of multicore systems for safe and secure control applications. However, it was always seen as applicable to other scenarios as well - which was one reason to publish it as open source. One of these additional use cases is high-bandwidth and low-latency packet processing in software.

In this presentation, we will explain how the Jailhouse hypervisor can be used to isolate data planes from control planes or other tasks in a multicore Linux system. Using the example of DPDK, we will show how full CPU dedication can be achieved for packet processing workload without sacrificing monitoring or control capabilities.
We will also provide first results of experiments performed with this architecture.