KVM architecture on x86 systems
Kernel-based virtual machine (KVM) technology is the most recent step in the evolution of open source, cross-platform virtualization technology. KVM turns the Linux kernel into a bare-metal hypervisor using the hardware virtualization support built into x86, POWER and other processors. This means that KVM can use Linux to do many of the things that a hypervisor needs to do, like scheduling tasks, managing memory and interacting with hardware devices.
KVM creates virtual machines as Linux processes which can then run Linux and potentially other operating systems as guests using a modified version of another open source module – QEMU – to provide I/O device emulation inside the virtual machine. KVM is thus able to efficiently and effectively run a range of workloads in virtual machines – and also Linux applications natively alongside if required.
The Linux Advantage
By leveraging Linux for core functions, KVM is able to avoid reinventing the wheel – taking advantage of the performance, scalability and security already built into Linux, which has been enterprise hardened for over 10 years and is trusted by millions of organizations in the heart of their data center to run their mission critical workloads. This gives KVM a significant "feature velocity" that other virtualization solutions cannot match. KVM has also brought new features to the Linux kernel including kernel page sharing (KSM), transparent large page support, and a new user-mode device driver infrastructure. Based on Linux, KVM is designed to be cost-effective and efficient and avoids vendor "lock in" giving you the virtualization capabilities you need.
All choice, no vendor-lock in
Organizations demand choice that helps avoid expensive lock-in to proprietary virtualization technologies.
KVM – the open source alternative provides - a smarter choice.
Lower cost of ownership
As it is open source and available in existing Linux Distributions today, KVM is cost-effective. Analysis shows that KVM is 39% cheaper over a 3-year TCO compared to competition*
*Source: Red Hat Enterprise Virtualization for Servers: Competitive pricing guide, 2010
Enterprise Class Performance
In recent SPECvirt benchmarks KVM demonstrated the highest performance benchmarks and the highest number of performant virtual machines running on a single host. KVM has published the top four SPECvirt_sc2013 benchmarks*
SELinux enables KVM to provide Mandatory Access Control security between virtual machines. This allows Cloud providers with multiple tenants or customers to provide advanced security protection on a “need-to-know” basis between virtual machines. With KVM, security-conscious organizations can create secure, open virtualization IT environments and private clouds, and save money on virtualization security tools. KVM meets government security standards through Common Criteria Certification at Evaluation Assurance Level 4+ (EAL4+). Learn more here.
KVM packaging on x86 systems
There’s two main ways of getting KVM.
1. As part of a Linux distribution (shown as everything inside the blue box)
Many Linux distributions already come with KVM as part of the package, including Red Hat Enterprise Linux, SUSE Linux Enterprise Server, and Canonical Ubuntu.
- Red Hat Enterprise Linux 5.4 and above
- SUSE Linux Enterprise Server 11 SP1 and above
- Canonical Ubuntu 10.04 LTS and above
2. As a standalone hypervisor (shown as everything inside the red box)
Here the KVM / Linux combination has been optimized and stripped down to leave just the modules needed to deliver a hypervisor. Red Hat Enterprise Virtualization and IBM PowerKVM are examples of this approach.
- Red Hat Enterprise Virtualization 3.1 and above
- IBM PowerKVM
KVM - Open Virtualization for the Enterprise and OpenStack Clouds
New IDC white paper discussing the state of open virtualization and key opportunities for the KVM hypervisor
Latest KVM Performance Benchmarks
KVM is scalable and high performance, delivering the top four SPECvirt_sc2013 results
What are the benefits of KVM?
- Lower cost
39 percent cheaper over a three-year TCO
- Better performance
94 percent better virtual machine consolidation
- Hardened security
Built in hardened security with SE Linux