Archive: https://archive.today/Dy7m0 From the post: >>A new set of Linux kernel patches posted today work to improve the nested VMX performance for benefiting Intel processors making use of KVM virtualization. Amazon engineer Fred Griffoul posted a set of five patches aiming to address performance issues around nested VMX (Intel) when handling unmanaged guest memory. In particular, memory passed via the "mem=" parameter or guest_memfd for non-confidential computing virtual machines. It was found that with the current Intel VMX code there is significant performance overhead due to expensive remapping operations. With nested VMX usage the system is accessing guest pages during L2 VM entry/exit cycles leading to much overhead.