These seems to be linux's own mitigations against L1TF. There's no mention about microcode being updated here, which I assume isn't the case. I assume the micr

These seems to be linux's own mitigations against L1TF. There's no mention about microcode being updated here, which I assume isn't the case. I assume the microcode update could be either equal o slightly worse in terms of performance, as the CPU might need to flush more frequently. Which is pretty sad, as the status of kernel+microcode updates is quite confusing already. Some mitigations can take advantage of new microcode updates, if the kernel is recent enough. How does the pure soft-workaround compare in terms of performance to the microcode-assisted one? Note that, combining all workarounds for meltdown+spectre-v1/v2+l1tf can have a significant performance hit for some workloads which are not purely cpu-bound. On top of that HT is now looking like a bad idea to start with. I'm pretty sure that for a server where there's a lot of I/O and virtualization going on, enabling all the patches and workarounds + disabling HT can take a massive cut in overall throughput.