Get the latest tech news
Experimental Linux Address Space Isolation "ASI" v2 Patches: I/O Throughput Lower By 70%
Google engineers and others have been talking about Address Space Isolation 'ASI' for the Linux kernel to better deal with speculative execution attacks and other CPU vulnerabilities
Google engineers and others have been talking about Address Space Isolation "ASI" for the Linux kernel to better deal with speculative execution attacks and other CPU vulnerabilities. Brendan Jackman of Google sent out the Linux ASI v2 RFC patches a few minutes ago as the latest effort for mitigating a variety of CPU vulnerabilities by unmapping sensitive data from the kernel address space. For FIO 4k read (I suppose this workload is maximally sensitive to this issue) I saw a 70% degradation in throughput, with a Sapphire Rapids machine hard-coded to perform IBPB and RSB-stuffing on asi_exit().
Or read this on Phoronix