3 ms·
It would be nice if we were able to do this for specific cores, and then somehow assign critical applications to secure cores and regular applications to perfor
by gchamonlive 7y ago
It would be nice if we were able to do this for specific cores, and then somehow assign critical applications to secure cores and regular applications to performance cores
- xhgdvjky 7y agoyou could get two machines
- gchamonlive 7y agoYou mean like a heterogeneous cluster? Do you have suggestions on how to manage load deployment on such a topology based on how security critical the application is
- yjftsjthsd-h 7y agoThat actually sounds straightforward in most job scheduling software that I've seen; just tag the hosts "nomitigations"/"mitigations_on" or so, and set constraints on where jobs are scheduled to match.
- yencabulator 7y agoI've been wondering why we haven't seen a linux kernel scheduler yet that'll SMT colocate only threads of the same process. Derisk the SMT-based attacks by making the only targets be "self". (Or processes of the same user in the same namespaces, or some such criteria for "mutually trusting" processes.)