Scenario 1 included a concern about an attacker gaining access to a VM, and then having the ability to modify the memory contents of another VM.I recall two potential scenarios and security concerns which led to VMware changing the original default behavior for TPS. Note, that TPS is still enabled by default from within the same VM, even today with ESXi 8. If my memory serves me right, this was originally enabled by default in ESX/ESXi version 5, but was later globally disabled due to security vulnerabilities and concerns.
This process stops the system from storing redundant memory pages, and thus frees up physical memory for other uses. Transparent Page Sharing is the process in which ESXi can provide memory deduplication by storing duplicate memory pages as a single page on the physical memory of the host. I also want to show you how to enable TPS globally (Inter-VM), and also discuss TPS being used with VMware Horizon and VDI.
This is a technology that isn’t widely known about, even amongst IT professionals with significant experience with VMware products.Īnd you may ask “Memory Deduplication, why aren’t we using this?!?” as it sounds like a pretty cool piece of technology… Well, I’m about to tell you why you’re not (Inter-VM), and share a few examples of where you would want to enable this. Today I want to talk about Memory Deduplication on ESXi with Transparent Page Sharing (TPS).
0 kommentar(er)
