Hi, > > Architecturally, I think we can have 3 processes: > > > > VMM -- guest device emulation -- host backend > > > > to me this looks like increasing our defence in depth strength, > > as opposed to just shifting things around ... > > Cool idea.
Isn't that exactly what we can do once the multi-process qemu patches did land, at least for block devices? With "VMM" being main qemu, "guest device emulation" being offloaded to one (or more) remote qemu process(es), and qemu-storage-daemon being the host backend? take care, Gerd