How to configure IOMMU protection for my hypervisor?

[Sureshraina12]

I'm developing my own bare-metal hypervisor over intel vt-x  technology.

My goal is to make it inaccessible to the OS I'm running over my hypervisor in any way, therefore I configured an EPT table to protect from memory access. I believe that now I'm missing protection from device with DMA access.

I would like to know how do I prevent from all PCI devices access to my hypervisor memory area? Code examples would be perfect for me.

[DeividA_Intel]

Hello Sureshraina12,  

Thank you for posting on the Intel® communities.   

I would like to let you know that we have a specific forum for this kind of issue and product, it is called the Intel Developer Zone. There you will receive the appropriate support on this and other concerns you may have related to this product.  

Here you will find the links to access the website and the community forums:  

• https://software.intel.com/content/www/us/en/develop/home.html
• https://community.intel.com/t5/Software/ct-p/software-products  

Please keep in mind that this thread will no longer be monitored by Intel.  

Regards,   

Deivid A.  

Intel Customer Support Technician