This disclosure relates to efficient input/output (I/O) page fault handling for devices in connection with a virtual machine.
This section is intended to introduce the reader to various aspects of art that may be related to various aspects of the present techniques, which are described and/or claimed below. This discussion is believed to be helpful in providing the reader with background information to facilitate a better understanding of the various aspects of the present disclosure. Accordingly, it should be noted that these statements are to be read in this light, and not as admissions of any kind.
Virtualized datacenters are used extensively to provide digital services including web hosting, streaming services, remote computing, and more. Virtualized datacenters are highly scalable. Virtualization allows the creation of multiple simulated environments, operating systems (OS), or dedicated resources from a single, physical hardware system. Virtualization is implemented using software, such as a virtual machine manager (VMM), which is also sometimes referred to as a hypervisor, to manage software known as a “guest” or virtual machine (VM). A virtual machine is software that, when executed on appropriate hardware, creates an environment allowing for the abstraction of an actual physical computer system also referred to as a “host” or “host machine.” In other words, a virtual machine is software that simulates a physical computer system. There may be multiple virtual machines running on a single host machine. Like physical computer systems, each virtual machine may run its own guest operating system (OS) and applications, as well as interact with peripheral devices such as Peripheral Component Interconnect express (PCIe) devices.
Some peripheral devices may interact with virtual machines using Single Root-Input/Output Virtualization (SR-IOV) or Scalable Input/Output Virtualization (SIOV) and may access memory of the virtual machines using a form of Direct Memory Access (DMA) through Address Translation Service (ATS). When the peripheral device attempts to access memory of the virtual machine and there is a page fault, the peripheral device may wait while the host resolves the page fault. When the peripheral device is to perform a DMA to system memory, and if the page isn't mapped in by the OS, the peripheral device needs to first fault the page in, then obtain the translation, then restart the DMA. On high speed network devices, this can introduce substantial delay before the fault is resolved and restarting the DMA operation. One way to avoid page faults is to “pin” memory to the virtual machine. Pinned memory is part of a physical memory that is defined to be used exclusively by certain software, such as by a particular virtual machine. While this protects against page faults in the memory of the virtual machine, pinning the memory prevents other virtual machines from using the same underlying physical memory. Accordingly, this may limit the number of virtual machines that can be accommodated by a single host machine.
Various aspects of this disclosure may be better understood upon reading the following detailed description and upon reference to the drawings in which:
One or more specific embodiments will be described below. In an effort to provide a concise description of these embodiments, not all features of an actual implementation are described in the specification. It should be appreciated that in the development of any such actual implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developers' specific goals, such as compliance with system-related and business-related constraints, which may vary from one implementation to another. Moreover, it should be appreciated that such a development effort might be complex and time consuming, but would nevertheless be a routine undertaking of design, fabrication, and manufacture for those of ordinary skill having the benefit of this disclosure.
When introducing elements of various embodiments of the present disclosure, the articles “a,” “an,” and “the” are intended to mean that there are one or more of the elements. The terms “including” and “having” are intended to be inclusive and mean that there may be additional elements other than the listed elements. Additionally, it should be understood that references to “some embodiments,” “embodiments,” “one embodiment,” or “an embodiment” of the present disclosure are not intended to be interpreted as excluding the existence of additional embodiments that also incorporate the recited features. Furthermore, the phrase A “based on” B is intended to mean that A is at least partially based on B. Moreover, the term “or” is intended to be inclusive (e.g., logical OR) and not exclusive (e.g., logical XOR). In other words, the phrase A “or” B is intended to mean A, B, or both A and B. Moreover, this disclosure describes various data structures, such as instructions for an instruction set architecture. These are described as having certain domains (e.g., fields) and corresponding numbers of bits. However, it should be understood that these domains and sizes in bits are meant as examples and are not intended to be exclusive. Indeed, the data structures (e.g., instructions) of this disclosure may take any suitable form.
This disclosure describes systems and methods that allow a peripheral device to perform direct memory access (DMA) to a pre-allocated page, communicating with the device driver to work with the OS to resolve a fault using the page that has the data. By using a configurable set of buffers to manage this pre-faulting, some of the latencies involved can be eliminated or reduced significantly.
These features may be implemented using any suitable integrated circuit devices that may be used as physical processing devices on which a virtual datacenter may run. The following architecture discussed below with respect to
Write mask registers 14 may include m (e.g., 8) write mask registers (k0 through km), each having a number (e.g., 64) of bits. Additionally or alternatively, at least some of the write mask registers 14 may have a different size (e.g., 16 bits). At least some of the vector mask registers 12 (e.g., k0) are prohibited from being used as a write mask. When such vector mask registers are indicated, a hardwired write mask (e.g., 0xFFFF) is selected and, effectively disabling write masking for that instruction.
General-purpose registers 16 may include a number (e.g., 16) of registers having corresponding bit sizes (e.g., 64) that are used along with x86 addressing modes to address memory operands. These registers may be referenced by the names RAX, RBX, RCX, RDX, RBP, RSI, RDI, RSP, and R8 through R15. Parts (e.g., 32 bits of the registers) of at least some of these registers may be used for modes (e.g., 32-bit mode) that is shorter than the complete length of the registers.
Scalar floating-point stack register file (x87 stack) 18 has an MMX packed integer flat register file 20 is aliased. The x87 stack 18 is an eight-element (or other number of elements) stack used to perform scalar floating-point operations on floating point data using the x87 instruction set extension. The floating-point data may have various levels of precision (e.g., 16, 32, 64, 80, or more bits). The MMX packed integer flat register files 20 are used to perform operations on 64-bit packed integer data, as well as to hold operands for some operations performed between the MMX packed integer flat register files 20 and the XMM registers.
Alternative embodiments may use wider or narrower registers. Additionally, alternative embodiments may use more, less, or different register files and registers.
Processor cores may be implemented in different ways, for different purposes, and in different processors. For instance, implementations of such cores may include: 1) a general purpose in-order core suitable for general-purpose computing; 2) a high performance general purpose out-of-order core suitable for general-purpose computing; 3) a special purpose core suitable for primarily for graphics and/or scientific (throughput) computing. Implementations of different processors may include: 1) a CPU including one or more general purpose in-order cores suitable for general-purpose computing and/or one or more general purpose out-of-order cores suitable for general-purpose computing; and 2) a coprocessor including one or more special purpose cores primarily for graphics and/or scientific (throughput). Such different processors lead to different computer system architectures, which may include: 1) the coprocessor on a separate chip from the CPU; 2) the coprocessor on a separate die in the same package as a CPU; 3) the coprocessor on the same die as a CPU (in which case, such a coprocessor is sometimes referred to as special purpose logic, such as integrated graphics and/or scientific (throughput) logic, or as special purpose cores); and 4) a system on a chip that may include on the same die the described CPU (sometimes referred to as the application core(s) or application processor(s)), the above described coprocessor, and additional functionality. Example core architectures are described next, followed by descriptions of example processors and computer architectures.
In
The front-end unit 56 includes a branch prediction unit 62 coupled to an instruction cache unit 64 that is coupled to an instruction translation lookaside buffer (TLB) 66. The TLB 66 is coupled to an instruction fetch unit 68. The instruction fetch unit 68 is coupled to a decode circuitry 70. The decode circuitry 70 (or decoder) may decode instructions and generate as an output one or more micro-operations, micro-code entry points, microinstructions, other instructions, or other control signals, which are decoded from, or which otherwise reflect, or are derived from, the original instructions. The decode circuitry 70 may be implemented using various different mechanisms. Examples of suitable mechanisms include, but are not limited to, look-up tables, hardware implementations, programmable logic arrays (PLAs), microcode read only memories (ROMs), etc. The processor core 54 may include a microcode ROM or other medium that stores microcode for macroinstructions (e.g., in decode circuitry 70 or otherwise within the front-end unit 56). The decode circuitry 70 is coupled to a rename/allocator unit 72 in the execution engine unit 58.
The execution engine unit 58 includes a rename/allocator unit 72 coupled to a retirement unit 74 and a set of one or more scheduler unit(s) 76. The scheduler unit(s) 76 represents any number of different schedulers, including reservations stations, central instruction window, etc. The scheduler unit(s) 76 is coupled to physical register file(s) unit(s) 78. Each of the physical register file(s) unit(s) 78 represents one or more physical register files storing one or more different data types, such as scalar integers, scalar floating points, packed integers, packed floating points, vector integers, vector floating points, statuses (e.g., an instruction pointer that is the address of the next instruction to be executed), etc. In one embodiment, the physical register file(s) unit(s) 78 includes the vector registers 12, the write mask registers 14, and/or the x87 stack 18. These register units may provide architectural vector registers, vector mask registers, and general-purpose registers. The physical register file(s) unit(s) 78 is overlapped by the retirement unit 74 to illustrate various ways in which register renaming and out-of-order execution may be implemented (e.g., using a reorder buffer(s) and a retirement register file(s); using a future file(s), a history buffer(s), and a retirement register file(s); using a register maps and a pool of registers; etc.).
The retirement unit 74 and the physical register file(s) unit(s) 78 are coupled to an execution cluster(s) 80. The execution cluster(s) 80 includes a set of one or more execution units 82 and a set of one or more memory access circuitries 84. The execution units 82 may perform various operations (e.g., shifts, addition, subtraction, multiplication) and on various types of data (e.g., scalar floating point, packed integer, packed floating point, vector integer, vector floating point). While some embodiments may include a number of execution units dedicated to specific functions or sets of functions, other embodiments may include only one execution unit or multiple execution units that all perform multiple different functions. The scheduler unit(s) 76, physical register file(s) unit(s) 78, and execution cluster(s) 80 are shown as being singular or plural because some processor cores 54 create separate pipelines for certain types of data/operations (e.g., a scalar integer pipeline, a scalar floating point/packed integer/packed floating point/vector integer/vector floating point pipeline, and/or a memory access pipeline that each have their own scheduler unit, physical register file(s) unit, and/or execution cluster. In the case of a separate memory access pipeline, a processor core 54 for the separate memory access pipeline is the only the execution cluster 80 that has the memory access circuitry 84). It should also be understood that where separate pipelines are used, one or more of these pipelines may be out-of-order issue/execution and the rest perform in-order execution.
The set of memory access circuitry 84 is coupled to the memory unit 60. The memory unit 60 includes a data TLB unit 86 coupled to a data cache unit 88 coupled to a level 2 (L2) cache unit 90. The memory access circuitry 84 may include a load unit, a store address unit, and a store data unit, each of which is coupled to the data TLB unit 86 in the memory unit 60. The instruction cache unit 64 is further coupled to the level 2 (L2) cache unit 90 in the memory unit 60. The L2 cache unit 90 is coupled to one or more other levels of caches and/or to a main memory.
By way of example, the register renaming, out-of-order issue/execution core architecture may implement the pipeline 30 as follows: 1) the instruction fetch unit 68 performs the fetch and length decoding stages 32 and 34 of the pipeline 30; 2) the decode circuitry 70 performs the decode stage 36 of the pipeline 30; 3) the rename/allocator unit 72 performs the allocation stage 38 and renaming stage 40 of the pipeline; 4) the scheduler unit(s) 76 performs the schedule stage 42 of the pipeline 30; 5) the physical register file(s) unit(s) 78 and the memory unit 60 perform the register read/memory read stage 44 of the pipeline 30; the execution cluster 80 performs the execute stage 46 of the pipeline 30; 6) the memory unit 60 and the physical register file(s) unit(s) 78 perform the write back/memory write stage 48 of the pipeline 30; 7) various units may be involved in the exception handling stage 50 of the pipeline; and/or 8) the retirement unit 74 and the physical register file(s) unit(s) 78 perform the commit stage 52 of the pipeline 30.
The processor core 54 may support one or more instructions sets, such as an x86 instruction set (with or without additional extensions for newer versions); a MIPS instruction set of MIPS Technologies of Sunnyvale, Calif.; an ARM instruction set (with optional additional extensions such as NEON) of ARM Holdings of Sunnyvale, Calif.). Additionally or alternatively, the processor core 54 includes logic to support a packed data instruction set extension (e.g., AVX1, AVX2), thereby allowing the operations used by multimedia applications to be performed using packed data.
It should be understood that the core may support multithreading (executing two or more parallel sets of operations or threads), and may do so in a variety of ways including time sliced multithreading, simultaneous multithreading (where a single physical core provides a logical core for each of the threads that physical core is simultaneously multithreading), or a combination thereof, such as a time-sliced fetching and decoding and simultaneous multithreading in INTEL® Hyperthreading technology.
While register renaming is described in the context of out-of-order execution, register renaming may be used in an in-order architecture. While the illustrated embodiment of the processor also includes a separate instruction cache unit 64, a separate data cache unit 88, and a shared L2 cache unit 90, some processors may have a single internal cache for both instructions and data, such as, for example, a Level 1 (L1) internal cache, or multiple levels of the internal cache. In some embodiments, the processor may include a combination of an internal cache and an external cache that is external to the processor core 54 and/or the processor. Alternatively, some processors may use a cache that is external to the processor core 54 and/or the processor.
The local subset of the L2 cache 104 is part of a global L2 cache unit 90 that is divided into separate local subsets, one per processor core. Each processor core 54 has a direct access path to its own local subset of the L2 cache 104. Data read by a processor core 54 is stored in its L2 cache 104 subset and can be accessed quickly, in parallel with other processor cores 54 accessing their own local L2 cache subsets. Data written by a processor core 54 is stored in its own L2 cache 104 subset and is flushed from other subsets, if necessary. The interconnection network 100 ensures coherency for shared data. The interconnection network 100 is bi-directional to allow agents such as processor cores, L2 caches, and other logic blocks to communicate with each other within the chip. Each data-path may have a number (e.g., 1012) of bits in width per direction.
Thus, different implementations of the processor 130 may include: 1) a CPU with the special purpose logic 136 being integrated graphics and/or scientific (throughput) logic (which may include one or more cores), and the cores 54A-N being one or more general purpose cores (e.g., general purpose in-order cores, general purpose out-of-order cores, or a combination thereof); 2) a coprocessor with the cores 54A-N being a relatively large number of special purpose cores intended primarily for graphics and/or scientific (throughput); and 3) a coprocessor with the cores 54A-N being a relatively large number of general purpose in-order cores. Thus, the processor 130 may be a general-purpose processor, coprocessor or special-purpose processor, such as, for example, a network or communication processor, compression engine, graphics processor, GPGPU (general purpose graphics processing unit), a high-throughput many integrated core (MIC) coprocessor (including 30 or more cores), an embedded processor, or the like. The processor 130 may be implemented on one or more chips. The processor 130 may be a part of and/or may be implemented on one or more substrates using any of a number of process technologies, such as, for example, BiCMOS, CMOS, or NMOS.
The memory hierarchy includes one or more levels of cache within the cores, a set or one or more shared cache units 140, and external memory (not shown) coupled to the set of integrated memory controller unit(s) 132. The set of shared cache units 140 may include one or more mid-level caches, such as level 2 (L2), level 3 (L3), level 4 (L4), or other levels of cache, a last level cache (LLC), and/or combinations thereof. While a ring-based interconnect network 100 may interconnect the integrated graphics logic 136 (integrated graphics logic 136 is an example of and is also referred to herein as special purpose logic 136), the set of shared cache units 140, and/or the system agent unit 134/integrated memory controller unit(s) 132 may use any number of known techniques for interconnecting such units. For example, coherency may be maintained between one or more cache units 142A-N and cores 54A-N.
In some embodiments, one or more of the cores 54A-N are capable of multi-threading. The system agent unit 134 includes those components coordinating and operating cores 54A-N. The system agent unit 134 may include, for example, a power control unit (PCU) and a display unit. The PCU may be or may include logic and components used to regulate the power state of the cores 54A-N and the integrated graphics logic 136. The display unit is used to drive one or more externally connected displays.
The cores 54A-N may be homogenous or heterogeneous in terms of architecture instruction set. That is, two or more of the cores 54A-N may be capable of execution of the same instruction set, while others may be capable of executing only a subset of a single instruction set or a different instruction set.
Referring now to
The optional nature of an additional processor 130B is denoted in
The memory 158 may be, for example, dynamic random-access memory (DRAM), phase change memory (PCM), or a combination thereof. For at least one embodiment, the controller hub 152 communicates with the processor(s) 130A, 130B via a multi-drop bus, such as a frontside bus (FSB), point-to-point interface such as QuickPath Interconnect (QPI), or similar connection 162.
In one embodiment, the coprocessor 160 is a special-purpose processor, such as, for example, a high-throughput MIC processor, a network or communication processor, a compression engine, a graphics processor, a GPGPU, an embedded processor, or the like. In an embodiment, the controller hub 152 may include an integrated graphics accelerator.
There can be a variety of differences between the physical resources of the processors 130A, 130B in terms of a spectrum of metrics of merit including architectural, microarchitectural, thermal, power consumption characteristics, and the like.
In some embodiments, the processor 130A executes instructions that control data processing operations of a general type. Embedded within the instructions may be coprocessor instructions. The processor 130A recognizes these coprocessor instructions as being of a type that should be executed by the attached coprocessor 160. Accordingly, the processor 130A issues these coprocessor instructions (or control signals representing coprocessor instructions) on a coprocessor bus or other interconnect, to the coprocessor 160. The coprocessor 160 accepts and executes the received coprocessor instructions.
Referring now to
Processors 172 and 174 are shown including integrated memory controller (IMC) units 178 and 180, respectively. The processor 172 also includes point-to-point (P-P) interfaces 182 and 184 as part of its bus controller units. Similarly, the processor 174 includes P-P interfaces 186 and 188. The processors 172, 174 may exchange information via a point-to-point interface 190 using P-P interfaces 184, 188. As shown in
Processors 172, 174 may each exchange information with a chipset 194 via individual P-P interfaces 196, 198 using point-to-point interfaces 182, 200, 186, 202. Chipset 194 may optionally exchange information with the coprocessor 176 via a high-performance interface 204. In an embodiment, the coprocessor 176 is a special-purpose processor, such as, for example, a high-throughput MIC processor, a network or communication processor, a compression engine, a graphics processor, a GPGPU, an embedded processor, or the like.
A shared cache (not shown) may be included in either processor 172 or 174 or outside of both processors 172 or 174 that is connected with the processors 172, 174 via respective P-P interconnects such that either or both processors' local cache information may be stored in the shared cache if a respective processor is placed into a low power mode.
The chipset 194 may be coupled to a first bus 206 via an interface 208. In an embodiment, the first bus 206 may be a Peripheral Component Interconnect (PCI) bus or a bus such as a PCI Express bus or another third generation I/O interconnect bus, although the scope of the present disclosure is not so limited.
As shown in
Referring now to
Referring now to
Embodiments of the mechanisms disclosed herein may be implemented in hardware, software, firmware, or a combination of such implementation approaches. Embodiments of the disclosure may be implemented as computer programs and/or program code executing on programmable systems including at least one processor, a storage system (including volatile and non-volatile memory and/or storage elements), at least one input device, and at least one output device.
Program code, such as data 224 illustrated in
The program code may be implemented in a high-level procedural or object-oriented programming language to communicate with a processing system. The program code may also be implemented in an assembly language or in a machine language. In fact, the mechanisms described herein are not limited in scope to any particular programming language. In any case, the language may be a compiled language or an interpreted language.
One or more aspects of at least one embodiment may be implemented by representative instructions stored on a machine-readable medium that represents various logic within the processor that, when read by a machine causes the machine to fabricate logic to perform the techniques described herein. Such representations, known as “IP cores,” may be stored on a tangible, machine readable medium and supplied to various customers or manufacturing facilities to load into the fabrication machines that make the logic or processor.
Such machine-readable storage media may include, without limitation, non-transitory, tangible arrangements of articles manufactured or formed by a machine or device, including storage media such as hard disks, any other type of disk including floppy disks, optical disks, compact disk read-only memories (CD-ROMs), compact disk rewritables (CD-RWs), and magneto-optical disks, semiconductor devices such as read-only memories (ROMs), random access memories (RAMs) such as dynamic random access memories (DRAMs), static random access memories (SRAMs), erasable programmable read-only memories (EPROMs), flash memories, electrically erasable programmable read-only memories (EEPROMs), phase change memory (PCM), magnetic cards, optical cards, or any other type of media suitable for storing electronic instructions.
Accordingly, embodiments of the embodiment include non-transitory, tangible machine-readable media containing instructions or containing design data, such as designs in Hardware Description Language (HDL) that may define structures, circuits, apparatuses, processors and/or system features described herein. Such embodiments may also be referred to as program products.
In some cases, an instruction converter may be used to convert an instruction from a source instruction set to a target instruction set. For example, the instruction converter may translate (e.g., using static binary translation, dynamic binary translation including dynamic compilation), morph, emulate, or otherwise convert instructions to one or more other instructions to be processed by the core. The instruction converter may be implemented in software, hardware, firmware, or a combination thereof. The instruction converter may be implemented on processor, off processor, or part on and part off processor.
Similarly,
Software running on a processing device such as discussed above with reference to
The virtual machine (VM) 304 may interact with any suitable number and types of peripheral devices 308. In the particular example shown in
The peripheral device 308 may access memory 310 of the virtual machine (VM) 304 using a form of Direct Memory Access (DMA) through Address Translation Service (ATS). Because the virtualized datacenter 300 uses on-demand paging, which will be discussed in greater detail below, even if an attempt to access the memory 310 of the virtual machine (VM) 304 results in an I/O page fault, it may be detected and recovered from gracefully.
Because the on-demand paging of this disclosure reduces the negative impacts of I/O page faults, the virtualized datacenter 300 may undertake several strategies that may substantially increase efficiency even though doing so may increase a likelihood of page faults. For example, as shown in
In
As shown in
Once all the memory 310 has been transferred over to the processing device 306B, as shown in
Another strategy that may increase efficiency at the cost of more page faults is to overcommit the memory 310. As utilization varies and more or fewer virtual machines (VMs) 304 are active on a processing device 306, it may be useful to dynamically overcommit memory across the virtual machines (VMs) 304. In a simplified example shown in
The processing device 306 may be a single-core processor having one processing core 330 that processes a single instruction pipeline or a multi-core processor having multiple processing cores 330 that may simultaneously process multiple instruction pipelines. The processing device 306 may include various commercially available processors, including without limitation Intel® Atom®, Celeron®, Core (2) Duo®, Core i3, Core i5, Core i7, Itanium®, Pentium®, Xeon® or Xeon Phi® processors, ARM processors, and similar processors. In some cases, the processing device 306 may be implemented as a single integrated circuit, two or more integrated circuits, or may be a component of a multi-chip module (e.g., in which individual microprocessor dies are included in a single integrated circuit package and hence share a single socket). The processing device 306 may be part of a computing system such as a datacenter server, a desktop computer, a tablet computer, a laptop computer, a netbook, a notebook computer, a personal digital assistant (PDA), a workstation, a cellular telephone, a mobile computing device, an Internet appliance or any other type of computing device. In some cases, the processing device 306 may be used in a system-on-a-chip (SoC) system or system-in-package (SiP) system.
In one example, the processing device 306 is a disaggregated server. A disaggregated server is a server that breaks up components and resources into subsystems and connects them through network connections (e.g., network sleds). Disaggregated servers can be adapted to changing storage or compute loads as needed without replacing or disrupting an entire server for an extended period of time. A server could, for example, be broken into modular compute, I/O, power, and storage modules that can be shared among other nearby servers. The processing device 306 may include any other suitable components to support the operation of the virtual machine (VM) 304, such as a communication bus between components of the processing device 306, a graphics controller, local cache memory (e.g., L4, L3, L2, L1 cache), and other supporting circuitry and software.
Virtualization is implemented using software, such as the virtual machine manager (VMM) 332, which may monitor and manage the virtual machine (VM) 304. The virtual machine manager (VMM) 332 may represent a hypervisor such as such as Kernel-based virtual machine (KVM), Xen, VMware ESXI, or the like. The virtual machine manager (VMM) 332 may abstract a physical layer of the processing device 306, presenting this abstraction to the virtual machines (VMs) 304 (sometimes referred to as the “guests”). The virtual machine manager (VMM) 332 may provide a virtual operating platform for the virtual machines (VMs) 304. In some implementations, more than one virtual machine manager (VMM) 332 may support different virtual machines (VMs) 304. Each virtual machine (VM) 304 may be a software implementation of a machine that executes programs as though it were an actual physical machine. For example, the virtual machine (VM) 304 illustrated in
The peripheral device 308 may interact with each virtual machine (VM) 304 as if it were a physical machine using a protocol engine (PE) 342. The protocol engine (PE) 342 may operate as a direct memory access (DMA) engine for a virtual function (VF) or physical function (PF) of the peripheral device 308. There may be multiple protocol engines 342 to enable interaction with multiple virtual machines (VMs) 304. The protocol engines 342 may interface with the guest device drivers 338 through a host interface (HIF) 344. The protocol engines 342 may directly access hardware components of the processing device 306, such as to read from or write to the physical memory corresponding to the guest memory 310 of the virtual machine (VM) 304, using a virtualization management protocol on the processing device 306 such as a virtualization technology-direct (VT-d) driver 346 that allows authorized technology direct I/O access.
To provide one particular example, the peripheral device 308 may receive incoming data 348 into an external interface 350 that may be destined for the virtual machine (VM) 304. In some cases, the peripheral device 308 may be a network interface card (NIC) that receives networking data into a local area network (LAN) interface. The protocol engine (PE) 342 corresponding to the virtual machine (VM) 304 that the data 348 is intended for may transfer the data 348 into the guest memory 310 of that virtual machine (VM) 304 using direct memory access (DMA).
Before continuing, it should be understood that, while data is stored at a physical memory address representing an actual location in physical memory (e.g., an actual physical location on a memory device 352 that may be accessed through a memory controller 354, managed by a memory management unit (MMU) 355), software running on the processing device 306 and the peripheral device 308 may operate using a virtual memory address that is translated to the physical memory address when the memory is accessed. A structure known as a translation lookaside buffer (TLB) stores recently used mappings of virtual memory addresses to their corresponding physical memory addresses. There may be multiple TLBs used by the processing device 306 and peripheral device 308 for memory for specific domains. The peripheral device 308 may maintain a local cache of recently accessed mappings between virtual memory addresses and physical memory addresses for I/O access in the form of a device translation lookaside buffer (devTLB) 356 and associated page tables 358. The device translation lookaside buffer (devTLB) 356 and associated page tables 358 may be used and maintained by a device memory management unit (devMMU) 360.
To transfer the data 348 to the guest memory 310 of the virtual machine (VM) 304, the device translation lookaside buffer (devTLB) 356 may rapidly translate the virtual memory address to its corresponding physical memory address. The protocol engine (PE) 342 may use DMA to store the data 348 in the physical memory of the processing device 306 corresponding to the guest memory 310 of the virtual machine (VM) 304.
If the device translation lookaside buffer (devTLB) 356 does not currently have an entry corresponding to the request, however, this may be referred to as a “cache miss” or “TLB miss.” A TLB miss handling process is used to obtain the corresponding entry by conducting a search known as a “page walk” through the page tables 358. If the page walk does not identify the physical memory address that corresponds to the requested virtual memory address, the peripheral device 308 may request the translation from the processing device 306. For example, an address translation engine (ATE) 362 may send an Address Translation Service (ATS) message requesting the translation.
In the processing device 306, I/O memory management blocks 364 may respond to the ATS request from the peripheral device 308. The I/O memory management blocks 364 may include an input/output translation lookaside buffer (IOTLB) 366 that can be used by an input/output memory management unit (IOMMU) 368 to provide the physical memory address that corresponds to a desired virtual memory address indicated by the ATS request. If the requested translation is in the input/output translation lookaside buffer (IOTLB) 366, the physical memory address may be provided in response and the protocol engine (PE) 342 may use DMA to store the data 348 in the proper physical address on the processing device 306, making it accessible to the virtual machine (VM) 304 by way of its guest memory 310. If the input/output translation lookaside buffer (IOTLB) 366 does not currently have an entry corresponding to the request, however, a TLB miss handling process is used to obtain the corresponding entry by conducting a page walk through page tables 370. If the page walk is successful, an ATS response may provide the translation to the peripheral device 308, which may store the translation as an entry in the device translation lookaside buffer (devTLB) 356.
When the protocol engine (PE) 342 is able to obtain the translation from virtual memory to physical memory (from the device translation lookaside buffer (devTLB) 356 or the I/O memory management blocks 364), the protocol engine (PE) 342 may use DMA to write the data 348 to the proper physical address. The protocol engine (PE) 342 may populate entries to a work queue 372 for a protocol engine (PE) driver 374, which may populate a completion queue 376 to indicate that the memory transfer is complete. Different protocol engines 342 may have different respective sets of work queue 372, protocol engine (PE) driver 374, and completion queue 376.
If a translation is unavailable even after a page walk (e.g., the page walk does not identify the physical memory address that corresponds to the requested virtual memory address), the result is a page fault. A corresponding ATS response may be returned that indicates that a page fault has occurred. In the case of a page fault, the location in memory to which the data 348 is intended does not currently exist. The peripheral device 308 could discard the data 348 while awaiting the resolution of the page fault on the processing device 306, but this may introduce substantial latency since the data 348 may need to be retransmitted into the peripheral device 308 after the page fault is resolved. The peripheral device 308 could alternatively store the data 348 temporarily in a local buffer on the peripheral device 308 while awaiting the resolution of the page fault on the processing device 306, but this could increase the cost of the peripheral device 308 because this would entail adding large enough buffers to store the data 348. Indeed, in some cases, the peripheral device 308 may not have enough memory to store the data 348.
These challenges may be reduced or eliminated by performing on-demand device-assisted paging. When an indication of a page fault is received at the peripheral device 308, the protocol engine (PE) 342 may instead transfer the data by DMA to pre-allocated fault buffers of a fault buffer queue 378 on the processing device 306. The protocol engine (PE) 342 by way of the address translation engine (ATE) 362 may also write an entry into an I/O page fault (IPF) queue 380 that indicates a descriptor for a DMA operation that has encountered a page fault. The fault buffer queue 378 provides a set of descriptors and data buffers for temporarily storing data from faulting DMA writes until a page fault has been resolved. A pointer to these buffers is provided to steer the faulting payloads for temporarily storing payloads while the page fault is being resolved. The I/O page fault (IPF) queue 380 is a queue with entries that contain a descriptor for a DMA operation that has encountered a page fault. The descriptor contains information for an address translation engine on-demand paging (ATE ODP) driver 382 to successfully resolve the page fault. Logically, this is similar to PCIe Address Translation Service-Page Request Interface (ATS-PRI) as a mechanism to request the host for page fault resolution.
The fault buffer queue 378 and the I/O page fault (IPF) queue 380 may be memory that is “pinned” and therefore not subject to a page fault. They may reside in host memory that is pinned in the host operating system and, as such, able to store data that is sent by multiple different protocol engines 342 and/or for multiple different virtual machines (VMs) 304. In some embodiments, these may, additionally or alternatively, be pinned in guest memory 310 of each virtual machine (VM) 304 or for a subset of the virtual machines (VMs) 304, and thus may be accessible to one protocol engine (PE) 342 and/or for that virtual machine (VM) 304. Transferring the data 348 to buffers corresponding to the fault buffer queue 378 does not immediately place the data 348 into the guest memory 310, but does allow the data 348 to avoid being discarded or being stored for an extended time on the peripheral device 308.
The fault buffer queue 378, I/O page fault (IPF) queue 380, and address translation engine on-demand paging (ATE ODP) driver 382 may support multiple protocol engines 342 associated with multiple virtual machines (VMs) 304.
Upon receipt of the request to handle the page fault, the host may handle the page fault (process block 462). This may be done in a variety of ways. In some embodiments, the input/output memory management unit (IOMMU) 368 may be used to resolve the page fault. For example, the IOMMU driver may walk page-tables and determine if the protocol engine (PE) 342 is owned by a guest (e.g., a virtual machine (VM) 304) or the host (e.g., a host operating system running on the processing device 306), and whether this is a first level fault. If the page fault is a guest fault, the IOMMU may inject a fake PRS message into a virtual page request queue (vPRQ) of the virtual input/output memory management unit (vIOMMU) 340 of the virtual machine (VM) 304, collect the results after the virtual machine (VM) 304 returns a page response, and send the result to the address translation engine on-demand paging (ATE ODP) driver 382. If the fault is a shared virtual memory (SVM) fault, the host operating system running on the processing device 306 may perform a native page fault resolution and return the results back to the address translation engine on-demand paging (ATE ODP) driver 382. In another example, the host may handle the page fault using the host MMU and/or VT-D driver 346. For instance, the host MMU and/or VT-D driver 346 may determine whether this is a first or second level fault and where to steer the page fault. First level faults may be handled using the virtual input/output memory management unit (vIOMMU) 340 of the virtual machine (VM) 304 (e.g., via the VT-D driver 346), while second level faults may be handled directly via the VT-D driver 346.
In either case, the fault handler resolves the fault and returns a successful fault-handling event to the address translation engine on-demand paging (ATE ODP) driver 382 (process block 464). The response may be analogous to a Page Request Service (PRS) response that would be made to the peripheral device 308. The response may contain an indication of success along with PRS fields according to the PRS specification, though there may be no host physical address (HPA) returned. Indeed, the address translation engine on-demand paging (ODP ATE) driver 382 may have only the guest physical address (GPA) since the page fault has been handled.
Using the guest physical address (GPA), the address translation engine on-demand paging (ATE ODP) driver 382 may cause the faulted payload stored in the fault buffer to be directly written to the memory 310 (process block 466). For example, the address translation engine on-demand paging (ATE ODP) driver 382 may make a call to the virtual machine manager (VMM) 332 such as, or similar to, kvm_write_guest( ). This may directly write the faulted payload and/or completions to the buffer and completion queue 376 as allocated by the protocol engine (PE) driver 374 corresponding to that virtual machine (VM) 304. The virtual machine manager (VMM) 332 may respond to the address translation engine on-demand paging (ATE ODP) driver 382 with an indication of success. Thereafter, the address translation engine on-demand paging (ATE ODP) driver 382 may respond to the address translation engine (ATE) 362 to indicate resolution with respect to the I/O page fault (IPF) handling. In some cases, the address translation engine on-demand paging (ATE ODP) driver 382 may also issue interrupts on behalf of the protocol engine (PE) 342 to the virtual machine (VM) 304 to process completions once the data has been stored in the newly allocated physical memory.
This process is shown visually by way of communication between components in a flow diagram in
The address translation engine on-demand paging (ATE ODP) driver 382 may issue a page fault handle request 506 to the VT-D driver 346. For example, the address translation engine on-demand paging (ATE ODP) driver 382 may issue a Page Request Service (PRS) request using a non-blocking call to handle_mm_fault( ). If the page fault is a second-level fault, the VT-D driver 346 may handle it directly. If the page fault is a first-level fault, the VT-D driver 346 may issue a page fault request message 508 to the virtual input/output memory management unit (vIOMMU) 340 by way of the virtual machine manager (VMM) 332. The virtual input/output memory management unit (vIOMMU) 340 may resolve the page fault and provide a response 510 with the resulting guest physical address (GPA). The VT-D driver 346 may issue a response 512 returning a successful fault-handling event to the address translation engine on-demand paging (ATE ODP) driver 382. The response 512 may contain an indication of success along with PRS fields specified by the PRS specification and indicating the guest physical address (GPA).
Using the guest physical address (GPA), the address translation engine on-demand paging (ATE ODP) driver 382 may issue a message 514 to the virtual machine manager (VMM) 332 to cause the faulted payload stored in the fault buffer to be directly written to memory. The message 514 may be a call that is, or is similar to, kvm_write_guest( ). Once the operation is complete, the virtual machine manager (VMM) 332 may issue a response 516 to the address translation engine on-demand paging (ATE ODP) driver 382 with an indication of success. Thereafter, the address translation engine on-demand paging (ATE ODP) driver 382 may issue a page fault response 518 to the address translation engine (ATE) 362 to indicate that the I/O page fault has been handled. Furthermore, the address translation engine on-demand paging (ATE ODP) driver 382 may also issue interrupts to the virtual machine (VM) 304 to process completions once the data has been stored in the newly allocated physical memory. In addition, the address translation engine on-demand paging (ATE ODP) driver 382 or a component of the peripheral device 308 (e.g., the device memory management unit (devMMU) 360) may issue a further request (not shown) to the input/output memory management unit (IOMMU) 368 to pre-populate the page information into the input/output translation lookaside buffer (IOTLB) 366. This may avoid a possible page walk due to a TLB miss in the future.
This process may be applied in numerous use cases with different types of peripheral devices. These include a network interface card (NIC), a storage device such as non-volatile memory (e.g., an NVM Express device), a cryptographic engine (e.g., Look-Aside Crypto), a compression engine, a remote direct memory access (RDMA) device, to name just a few. One specific use case is shown by a communication diagram 550 in
The communication diagram 550 begins as the virtual machine begins an operation 556 prepares to receive a packet or stream of packets from the smart NIC. The guest device driver 338 (e.g., a guest LAN driver) may allocate DMA memory for the receipt of the packet and may pin, in the guest MMU 336, the guest virtual address (GVA) to the guest physical address (GPA) (message 558). The guest device driver 338 may also map the GVA to GPA in the guest virtual input/output memory management unit (vIOMMU) 340 (message 560). The guest virtual input/output memory management unit (vIOMMU) 340 may issue a request to the input/output memory management unit (IOMMU) 368 to create an extended page table (EPT) page table entry that may be unpinned without a physical page allocation (message 562). The guest device driver 338 may post the GPA (e.g., a tail bump) at the LAN interface circuitry 350 (message 564).
To handle the incoming packet, a receive (RX) write operation 566 may begin as the packet arrives on the physical network wiring 552 from which it is taken in by the LAN interface circuitry 350 (message 568). The LAN interface circuitry 350 may issue an address translation request to the device translation lookaside buffer (devTLB) 356 (message 570). In this example, the device translation lookaside buffer (devTLB) 356 does not have the translation, so the device translation lookaside buffer (devTLB) 356 generates a cache miss (message 572). The device translation lookaside buffer (devTLB) 356 therefore issues an address translation request via Address Translation Service (ATS) to the input/output memory management unit (IOMMU) 368 (message 574). If the input/output memory management unit (IOMMU) 368 also lacks the translation, the input/output memory management unit (IOMMU) 368 replies with an indication that a page fault has been detected (although the hardware may be unable to identify which type of page fault has been detected (e.g., entry missing, page missing or access violation)) (message 576).
When the page fault is due to true overprovisioning (e.g., rather than due to malicious activity or a missing entry), the device translation lookaside buffer (devTLB) 356 may indicate the page fault to the address translation engine (ATE) 362 (message 578). The address translation engine (ATE) 362 or other components of the peripheral device (e.g., a protocol engine (PE) 342 as shown in
The address translation engine on-demand paging (ATE ODP) driver 382 may issue a request to the memory management unit (MMU) 355 to handle the page fault (e.g., to find a host physical address (HPA) for the corresponding guest physical address (GPA) that has been allocated in the virtual machine but which resulted in a page fault due to not being allocated in host physical memory) (message 582). Once the memory management unit (MMU) 355 handles the page fault, the memory management unit (MMU) 355 may respond with an indication that the page fault has been successfully handled (message 584). The address translation engine on-demand paging (ATE ODP) driver 382 may write the contents of the fault buffer to the physical memory corresponding to the guest physical address (GPA) that has now been allocated (message 586). For instance, the address translation engine on-demand paging (ATE ODP) driver 382 may issue a call on behalf of the virtual machine manager (VMM) 332 or to the virtual machine manager (VMM) 332 such as kvm_write_user( ) using the GPA. The address translation engine on-demand paging (ATE ODP) driver 382 may reply to the address translation engine (ATE) 362 when this is complete to indicate that the I/O page fault (IPF) has been resolved and the page fault has been handled (message 588). The address translation engine on-demand paging (ATE ODP) driver 382 may also generate a packet receive event (e.g., by writing to a Message Signaled Interrupt-Extensions (MSIX) register such as SW_triggered_MSIX_Interrupt_Register) to the HIF 344 to indicate that the packet has been written to its proper destination (message 590). The HIF 344 may issue a packet receive event handling message to the guest device driver 338 (message 592), allowing the guest device driver 338 to process the packet (message 594).
The system may also be able to respond appropriately in the case of a malicious device activity when an access violation is detected at operation 596. Under these conditions, the device translation lookaside buffer (devTLB) 356 may indicate the page fault to the address translation engine (ATE) 362 and noting that it is due to an access violation (which could be due to malicious activity) (message 598). The address translation engine (ATE) 362 or other components of the peripheral device (e.g., a protocol engine (PE) 342 as shown in
The address translation engine on-demand paging (ATE ODP) driver 382 may issue a request to the memory management unit (MMU) 355 to handle the page fault (e.g., to find a host physical address (HPA) for the corresponding guest physical address (GPA) that resulted in a page fault) (message 602). When the memory management unit (MMU) 355 attempts to handle the page fault, the memory management unit (MMU) 355 may identify that the page fault is due to an access violation and may respond with such an indication (message 604). The address translation engine on-demand paging (ATE ODP) driver 382 may issue a request to log the potential malicious activity and trigger a PCIe function reset (message 606).
On-demand device-assisted paging may also be performed with peripheral devices with enhanced security features. In an example shown in
Page faults related to virtual machines (VMs) 304 may be handled by the address translation engine on-demand paging (ATE ODP) driver 382 in the manner discussed above. Page faults related to TDs 618 may be routed through and handled by the trusted intermediary 620. For example, the trusted intermediary 620 may have access to a separate set of trusted I/O page fault (TIPF) queues 624 and trusted fault buffer queues 626 that operate for page faults for TDs 618 in the same manner as the I/O page fault (IPF) queues 380 and fault buffer queues 378 do for virtual machines (VMs) 304. For additional security, the trusted fault buffer queues 626 may be managed by the trusted intermediary as private memory donated by the virtual machine manager (VMM) 332 at the initiation of the peripheral device 308. Trusted physical functions (PFs) or virtual functions (VFs) of the TDs 618 (e.g., a protocol engine (PE) 342 associated with a trust domain (TD) 618) may use the trusted fault buffer queues 626 for redirection of incoming data 348 when there is a page fault. The trusted intermediary 620 may handle the page fault for the trust domain (TD) 618 in substantially the same way that the address translation engine on-demand paging (ATE ODP) driver 382 does for a virtual machine (VM) 304. Upon completion, the trusted intermediary 620 may inform the address translation engine on-demand paging (ATE ODP) driver 382 that a page fault has been handled, which may acknowledge that page fault processing is complete by writing a descriptor to a re-injection queue 628. By performing on-demand device-assisted page fault handling, greater memory efficiency may be reached in virtualized datacenters with virtual machines (VMs) 304 as well as trusted domains (TDs) 618.
EXAMPLE EMBODIMENT 1. A system comprising:
a peripheral device to access guest memory of a virtual machine using direct memory access (DMA); and
a processing device to run the virtual machine, wherein the processing device comprises a buffer allocated to receive a payload from the peripheral device while an input/output page fault corresponding to a page of the guest memory is resolved.
EXAMPLE EMBODIMENT 2. The system of example embodiment 1, wherein the processing device is to run a driver to request resolution of the input/output page fault and cause the payload to be copied from the buffer to a newly allocated page of the guest memory after the input/output page fault is resolved.
EXAMPLE EMBODIMENT 3. The system of example embodiment 2, wherein the processing device to run a virtual machine manager to manage the virtual machine, wherein the driver to cause the payload to be copied by issuing a call to the virtual machine manager.
EXAMPLE EMBODIMENT 4. The system of example embodiment 2, wherein the driver running on the processing device, after the input/output page fault is resolved, is to provide an indication to the peripheral device that the input/output page fault is resolved to enable the peripheral device to access the page of guest memory.
EXAMPLE EMBODIMENT 5. The system of example embodiment 2, wherein the driver is to communicate with an address translation engine of the peripheral device using Address Translation Service (ATS) messages.
EXAMPLE EMBODIMENT 6. The system of example embodiment 1, wherein the processing device comprises:
an input/output page fault queue to store a descriptor corresponding to the input/output page fault; and
a fault buffer queue to store a descriptor corresponding to a location of the buffer allocated to receive the payload while the input/output page fault is resolved.
EXAMPLE EMBODIMENT 7. The system of example embodiment 6, wherein the input/output page fault queue and the fault buffer queue are pinned.
EXAMPLE EMBODIMENT 8. The system of example embodiment 6, wherein the peripheral device, in response to a direct memory access (DMA) attempt that results in the input/output page fault, is to:
write the descriptor to the input/output page fault queue corresponding to the input/output page fault;
store the payload in the buffer; and
write the descriptor to the fault buffer queue corresponding to the location of the buffer.
EXAMPLE EMBODIMENT 9. The system of example embodiment 8, wherein the peripheral device, in response to a direct memory access (DMA) attempt to store an other payload that results in an other input/output page fault corresponding to an other guest memory of another virtual machine is to:
write an other descriptor to the input/output page fault queue corresponding to the other input/output page fault;
store the other payload in another buffer; and
write an other descriptor to the fault buffer queue corresponding to the location of the other buffer.
EXAMPLE EMBODIMENT 10. The system of example embodiment 1, wherein the peripheral device comprises at least one of a scalable input/output virtualization (SIOV) device and a single-root input/output virtualization (SR-IOV) device.
EXAMPLE EMBODIMENT 11. The system of example embodiment 1, wherein the processing device to run a plurality of other virtual machines, at least one of which has other guest memory that is overcommitted with the guest memory.
EXAMPLE EMBODIMENT 12. An article of manufacture comprising one or more tangible, non-transitory machine-readable media comprising instructions that, when executed by a processing device, cause the processing device to:
EXAMPLE EMBODIMENT 13. The article of manufacture of example embodiment 12, wherein the instructions, when executed by the processing device, cause the processing device to, after resolution of the input/output page fault results in a page of physical memory being newly allocated, use the descriptor from the fault buffer queue to copy the payload from the buffer to the newly allocated page of physical memory.
EXAMPLE EMBODIMENT 14. The article of manufacture of example embodiment 13, wherein the instructions, when executed by the processing device, cause the processing device to copy the payload to a guest physical address (GPA) of memory of a virtual machine indicated in the descriptor in the input/output page fault queue.
EXAMPLE EMBODIMENT 15. The article of manufacture of example embodiment 14, wherein the instructions, when executed by the processing device, cause the processing device to copy the payload using a virtual machine manager.
EXAMPLE EMBODIMENT 16. The article of manufacture of example embodiment 13, wherein the instructions, when executed by the processing device, cause the processing device to send an entry corresponding to the newly allocated page to a device translation lookaside buffer on the peripheral device.
EXAMPLE EMBODIMENT 17. A peripheral device configured to:
attempt to store, in a guest physical address of memory of a virtual machine running on a processing device with which the peripheral device is coupled, a payload; and
when the attempt to store the payload in the guest physical address results in a page fault, store the payload into a buffer on the processing device while the page fault is resolved on the processing device.
EXAMPLE EMBODIMENT 18. The peripheral device of example embodiment 17, wherein the peripheral device is configured to:
EXAMPLE EMBODIMENT 19. The peripheral device of example embodiment 17, wherein the peripheral device comprises at least one of a network interface card, a storage device, a cryptographic engine, a compression engine, and a remote direct memory access (RDMA) device, or any combination thereof.
EXAMPLE EMBODIMENT 20. A method for live migration of a virtual machine from a first processing device to a second processing device, the method comprising:
beginning to copy a state of the virtual machine and a guest memory of the virtual machine from the first processing device to the second processing device; and
in response to an input/output page fault resulting from an attempted memory access, by a peripheral device coupled to the second processing device, to store a payload to a page of the guest memory that has not yet been copied from the first processing device to the second processing device, storing the payload to a buffer on the second processing device while the input/output page fault is resolved.
EXAMPLE EMBODIMENT 21. The method of example embodiment 20, comprising, after the input/output page fault is resolved by allocating memory to the guest memory, storing the payload in the guest memory.
EXAMPLE EMBODIMENT 22. A processing device comprising:
a buffer allocated to receive a payload from a peripheral device while an input/output page fault corresponding to a page of guest memory of a virtual machine running on the processing device is resolved;
an input/output page fault queue to store a descriptor corresponding to the input/output page fault; and
a fault buffer queue to store a descriptor corresponding to a location of the buffer allocated to receive the payload while the input/output page fault is resolved.
EXAMPLE EMBODIMENT 23. The processing device of example embodiment 22, wherein the virtual machine comprises a trust domain and the processing device comprises a trusted intermediary to resolve the input/output page fault.
EXAMPLE EMBODIMENT 24. The processing device of example embodiment 23, wherein the buffer is allocated to receive an other payload from the peripheral device while an other input/output page fault corresponding to an other page of guest memory of another virtual machine that is not a trust domain is running on the processing device is resolved;
wherein the processing device comprises:
an other input/output page fault queue to store an other descriptor corresponding to the other input/output page fault;
an other fault buffer queue to store an other descriptor corresponding to a location of the buffer allocated to receive the payload while the input/output page fault is resolved; and
a driver other than the trusted intermediary to resolve the other input/output page fault.
While the embodiments set forth in the present disclosure may be susceptible to various modifications and alternative forms, specific embodiments have been shown by way of example in the drawings and have been described in detail herein. However, it should be understood that the disclosure is not intended to be limited to the particular forms disclosed. The disclosure is to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the disclosure as defined by the following appended claims.
The techniques presented and claimed herein are referenced and applied to material objects and concrete examples of a practical nature that demonstrably improve the present technical field and, as such, are not abstract, intangible or purely theoretical. Further, if any claims appended to the end of this specification contain one or more elements designated as “means for [perform]ing [a function] . . . ” or “step for [perform]ing [a function] . . . ”, it is intended that such elements are to be interpreted under 35 U.S.C. 112(f). However, for any claims containing elements designated in any other manner, it is intended that such elements are not to be interpreted under 35 U.S.C. 112(f).