Linux kernel to remove unnecessary cache flushing for Intel TDX
Intel TDX hardware handles KeyID transitions without software cache flushing, and the Linux kernel is removing the now-unnecessary code.
Summary
Intel Trust Domain Extensions (TDX) için Linux kernel'de yapılan bir düzeltme, bellek KeyID'leri arası geçişlerde gereksiz hale gelen yazılım tabanlı cache flush işlemlerini ortadan kaldırıyor. Intel mühendisi Rick Edgecombe'in gönderdiği yama serisine göre, TDX'in erken döneminde donanımın bu geçişlerde yazılım yardımına ihtiyaç duyacağı varsayılmıştı ancak gerçekte Xeon işlemciler bu işlemi donanım düzeyinde kendileri yönetebiliyormuş. Intel dokümantasyonu da yakın zamanda güncellenecek.
What the TDX cache flush removal changes
- MKTME KeyID transitions: Memory transitions between KeyIDs (used by Multi-Key Total Memory Encryption for unique AES keys) no longer need software-driven cache flushing
- Hardware capability: All finalized TDX-capable Xeon processors since Sapphire Rapids handle the cache coherency in hardware without software assistance
- Code simplification: The kernel removes TDX architecture code that was performing unneeded flushes on behalf of the VMM
- Documentation gap: Intel's architecture specification retained the flush requirements even though hardware didn't need them; docs will be updated in a future revision
- Performance impact: Patch messages do not quantify any performance improvement from the removal
Why it matters
Simpler kernel code reduces maintenance burden for TDX support, though the lack of stated performance gains suggests the primary benefit is architectural cleanup rather than measurable VM speedups for confidential computing workloads.
Original reference: www.phoronix.com →