On 19/06/2018 22:43, Michael S. Tsirkin wrote: > >> 2) Maybe -hostresource? > > Is ability to cause high latency for other threads really a resource? The "resource" here is host CPU time. In general, a vCPU with KVM_CPU_X86_DISABLE_EXITS will use more host CPU time and block overcommitting, just like mlock does for memory. Paolo > The issues in question: > 1. a malicious guest can cause high latency for others sharing the host cpu. > 2. to host scheduler cpu looks busier than it really is.
