In the beginning of June, the new Intel Haswell CPUs will be available. Besides the regular improvements like being faster, having better energy efficiency and having better graphics capabilities, these new CPUs will also include VMCS shadowing (Virtual Machine Control Structure Shadowing).
Basically it’s a feature that allows you to run a hypervisor (like VMware, Hyper-V, Xen Server) and create another hypervisor as a VM beneath it. This is also called nested virtualization.
Some of you might say, “Hey this is not new, I’ve already done this with VMware!”. The difference however is that the current method uses some sort of emulation that does not directly access the hardware. And even though it’s great for testing purposes, the performance is suboptimal.
With the embedded hardware supported VMCS shadowing in the new Intel Haswell CPU the nested hypervisor can directly access the hardware, which should improve performance. Also, it might even make it possible to use non-VMware hypervisors in a nested virtualization scenario.
Of course as always, we’ll just have to wait and see how the performance will be in real-life. It’s also not clear to me yet if hypervisors need to be updated to be able to leverage this option. Nonetheless, to me it sounds very promising and I look forward to playing around with it.
For more information read this great article by Gabe Knuth called “Could VMCS Shadowing (a.k.a. nested VMs) from Intel’s new Haswell processors be what Bromium needs to work in VMs?”. When you use the links in the article you will be able to get more information about the Intel Haswell CPUs including benchmarks and more detailed information about VMCS shadowing and use cases.
[EDIT 08-06-2013] Citrix is working hard on integrating VMCS Shadowing / Nested VMs in their products:
http://blogs.citrix.com/2013/06/03/intel-and-citrix-collaboration-to-bring-support-for-hardware-accelerated-nesting-of-hypervisors-into-market/#comments
If you’re planning to build / buy an Intel Haswell based computer or Home Lab, be sure to look into the confirmed USB3 bug in the chipset. Also unfortunately the DDR3 prices have increased substantially (almost 50%) over the last half year.
blog.bjornhouben.com 