----- jmattson@xxxxxxxxxx wrote: > While we're on the subject, is there any need for L0 to allocate a > vpid02 in the common case, where nested EPT is enabled? > > Per section 28.3.2 of the SDM, volume 3, when EPT is enabled, > combined > mappings in the TLB are tagged by {VPID, PCID, EP4TA}. With nested > EPT, vmcs02 and vmcs01 do not share an EP4TA. Therefore, I think it > suffices to simply copy the VPID field from vmcs12 to vmcs02 in this > case. Good point. I agree. This will trivially allow physical CPU to save multiple TLB entries populated by L2 with same EP4TA but different VPIDs. I do think however that this should be done on a separate patch series on top of this one. I will check if I can easily create that series of patches. Thanks, -Liran