US 12,248,807 B2
Methods, apparatus, systems, and instructions to migrate protected virtual machines
Ravi Sahita, Portland, OR (US); Dror Caspi, Kiryat Yam (IL); Vincent Scarlata, Beaverton, OR (US); Sharon Yaniv, Kiryat Tivon (IL); Baruch Chaikin, D.N. Misagv (IL); Vedvyas Shanbhogue, Austin, TX (US); Jun Nakajima, San Ramon, CA (US); Arumugam Thiyagarajah, Folsom, CA (US); Sean Christopherson, Portland, OR (US); Haidong Xia, Folsom, CA (US); Vinay Awasthi, San Francisco, CA (US); Isaku Yamahata, Urayasu (JP); Wei Wang, Shanghai (CN); and Thomas Adelmeyer, Phoenix, AZ (US)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by INTEL CORPORATION, Santa Clara, CA (US)
Filed on Dec. 26, 2020, as Appl. No. 17/134,339.
Prior Publication US 2022/0206842 A1, Jun. 30, 2022
Int. Cl. G06F 9/48 (2006.01); G06F 9/38 (2018.01); G06F 9/455 (2018.01); G06F 21/60 (2013.01)
CPC G06F 9/4856 (2013.01) [G06F 9/3836 (2013.01); G06F 9/45558 (2013.01); G06F 21/602 (2013.01); G06F 2009/4557 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45591 (2013.01)] 26 Claims
OG exemplary drawing
 
1. An apparatus comprising:
a processor; and
a non-transitory machine-readable storage medium, the non-transitory machine-readable storage medium storing a plurality of instructions, the plurality of instructions, if executed by the processor, to cause the processor to perform operations comprising to:
enforce, in response to execution of bundle import control primitives by circuitry of the processor, that a plurality of bundles of state of a first protected virtual machine (VM), received at a second platform over a stream during an in-order phase of a migration of the first protected VM from a first platform to the second platform, are imported and stored to a memory of a second protected VM of the second platform, in a same order that the plurality of bundles of state were exported from the first protected VM;
determine whether all bundles of state exported from the first protected VM prior to export of a marker of an end of the in-order phase of the migration, which is to have been received over the stream, have been imported to the second protected VM; and
determine whether to start an out-of-order phase of the migration based on whether the determination is that said all bundles of the state exported from the first protected VM prior to export of the marker over the stream have been imported to the second protected VM.