5 ms·

I'm curious as to how AWS plans to prevent users from generating malicious FPGA bitcode that physically damages the FPGA itself and/or the host machine over PCI

• Androider 9y ago
  You break it, you buy it? AWS has your credit card on file ;)
  • vvanders 9y ago
    I hope your credit card limits are high, digikey has them starting at $7k and going up quickly from there.
• anigbrowl 9y ago
  My very limited FPGA experience is taht the development tools give warnings about strange loops, but it sounds like it's easy enough to blow one up accidentally: https://electronics.stackexchange.com/questions/293915/vhdl-that-can-damage-fpga https://electronics.stackexchange.com/questions/293915/vhdl-...
• bedros 9y ago
  I have not read the whole FPGA HDK guide yet, but, I doubt amazon will give the designer access to pins on FPGA; they would give access to interfaces or IO blocks which connect to the pins your design sits inside a wrapper with access to IO blocks. inside the FPGA logic, you cannot do electrical damage, no matter how hard you try.
  • btown 9y ago
    Thermal damage may be possible, but they probably have monitoring that will shut down your logic if overheating is detected.
  • mikejmoffitt 9y ago
    You could have a lot of combinational logic dependent on floating/high-Z inputs, which is not good for CMOS circuitry.
    • dahtguy 9y ago
      What's so bad about high-Z inputs? Designing around a floating input is the same as designing around an undefined variable. Bad design but you can't "hurt" the hardware.
      • femto 9y ago
        An undefined variable is an abstract construct. You can model a floating input in as being analogous to an undefined variable and the model will fit reality most of the time, but the underlying reality is still governed by the complexities of physics, with potential for the model to break down. Damage is probably more of a risk for an external I/O, but it's still a possibility for an internal I/O. Probably more of a certainty with a malicious programmer. Who's going to be the first person to design an on-die switched capacitor voltage multiplier, using parasitic capacitance between gates as the energy storage, and use it drive an internal high impedance input to a damaging level?
    • duskwuff 9y ago
      The only tristate buffers in modern FPGAs are on the pins. There's no way to leave inputs floating internally.
    • bedros 9y ago
      Z logic or tri-state logic are not real in FPGAs, they are chains of AND OR logic so basically you cannot burn FPGA by making a short-circuit
      • mikejmoffitt 9y ago
        A floating pin on a CMOS device is absolutely real.
  • CamperBob2 9y ago
    inside the FPGA logic, you cannot do electrical damage, no matter how hard you try. I'd be a little worried about people making ring oscillators and driving them from the fastest possible output from a DCM. That used to be a hazard, not sure if it still would be at the UltraScale level of play. Or creating a configurable DCM or PLL and then setting it up with illegal values at runtime, when the synthesis tool won't notice...
• jeffbarr 9y ago
  Great question! I checked in with the team and this is what they told me: "The developer FPGA code is enclaved inside AWS FPGA Shell, to prevent malicious FPGA code from damaging the hardware and to provide the necessary protection for PCI Express and the host machine. The pin assignment of the FPGA is controlled by AWS." And "AWS infrastructure monitors the thermals as well and the F1 hardware was designed to sustain high power consumption to enable developers to utilize the maximal available FPGA resources and frequency."
  • bisrig 9y ago
    I spent a few minutes poking around their project scripts, and it looks like that the design file you upload back to EC2 is a post-routed design checkpoint, which is an interesting choice... I'll bet that they are doing partial reconfiguration with the I/O ring as the "static" layer.