Who Stole My CPU? Steal Time Mitigation at Digital Ocean
Explore CPU steal time in virtualized environments, its causes beyond hypervisor overcommitment, and strategies for mitigation to improve hardware utilization.
Untrusted File Systems
Exploring secure handling of untrusted filesystems in Linux, addressing challenges and potential solutions for USB sticks, VM images, and unprivileged containers.
Documenting Linux MM for Fun and for Fun
Insights into Linux memory management documentation: benefits, challenges, and future directions. Explores the value of documentation for developers and system understanding.
Exploring New Frontiers in Container Technology
Exploring container security measures, attack profiles, and innovative isolation techniques like system call emulation sandboxes to enhance containment and push the boundaries of container technology.
Distribution Kernels
Explore challenges in maintaining distribution kernels, including backporting, testing, ABI management, and cross-distribution collaboration. Gain insights from kernel maintainers across various platforms.
Scheduler MC
Exploring advanced Linux scheduler topics, including load balancing, idle optimization, and core scheduling, to enhance system performance and efficiency.
Linux Kernel VxLan with Multicast Routing for Flood Handling
Explore VxLan multicast routing in Linux kernel, addressing challenges and solutions for dynamic environments. Covers deployment scenarios, patches, and future developments.
LAG and Hardware Offload to Support RDMA and IO Virtualized Interfaces
Exploring LAG implementation for RDMA and virtualized interfaces, focusing on active-backup mode, flow-based active-active mode, and a new active-active mode for virtual functions.
Printk - Why Is It So Complicated?
Explore the complexities of printk(), its history, recent rework, and remaining challenges in kernel logging. Gain insights into lockless ring buffers and NMI-safe synchronization.
Reworking of KVA Allocator in Linux Kernel
Exploración detallada de las mejoras en el asignador KVA del kernel Linux, abordando problemas de fragmentación y rendimiento con nuevos esquemas de asignación y ubicación de memoria.
Programmable Socket Lookup with BPF
Explore BPF-based socket lookup for efficient packet steering, comparing it to existing methods and discussing implementation challenges, performance impacts, and user-space API usability.
Challenges of the RDMA Subsystem
Explore RDMA subsystem challenges in Linux, covering complex user APIs, DMA models, security, file system interactions, and networking functionality. Gain insights for emerging drivers facing similar issues.
What Does Remote Attestation Buy You?
Explore modern applications of TPM remote attestation in Linux, including secure remote deployment, easy recovery, and trust-based access control, without compromising security or user freedom.
Core Scheduling - Taming Hyper-Threads to Be Secure
Explore CPU vulnerabilities and core scheduling as a solution to keep hyperthreading secure. Learn about implementation, performance impacts, and future directions for this critical security feature.
Multipath TCP Upstreaming
Explore Multipath TCP upstreaming efforts for Linux, including implementation plans, roadmap, and future developments. Learn about RFC compliance, server use cases, and advanced features for client devices.
Red Hat Joins CI Party, Brings Cookies
Red Hat's CKI project transforms kernel testing with continuous integration, expanding to upstream maillists and inviting collaboration. Learn about their CI system, hardware, and reporting methods.
Netfilter Hardware Offloads
Explore hardware offloads in netfilter using flow rule and flow block APIs, covering payload mangling and connection tracking flowtable bypass for improved network performance.
Touch but Don't Look - Running the Kernel in Execute Only Memory
Explore execute-only memory implementation for kernel protection, covering benefits, virtualization techniques, and necessary code adaptations. Learn about enhanced security against control flow attacks and code diversification schemes.
SwitchDev Offload Optimizations
Exploring challenges and potential improvements in hardware offloading for Ethernet switching, focusing on multicast traffic, promiscuous mode, and redundancy protocols in Linux networking.
Linux Kernel Fastboot on the Way
Explore Linux kernel fastboot optimizations, cutting boot time from 3000ms to 300ms. Learn techniques for improving parallelization, memory initialization, and device probing across various platforms.
XDP Bulk Packet Processing
Explore XDP bulk packet processing for improved network performance. Learn about batching techniques, implementation challenges, and potential optimizations in Linux networking.