This series introduces support for Intel Mode-Based Execute Control
(MBEC) to KVM and nested VMX virtualization. By exposing MBEC to L2
guests, it enables a dramatic reduction in VMexits (up to 24x) for
Windows guests running with Hypervisor-Protected Code Integrity (HVCI),
significantly improving virtualization performance.
I can confirm the same. For windows 11 24H2 with all updates installed. I have VBS enabled and also WSL2 installed(but not working!). I am using x86-64-v3 + nested-virt for cpu flags. The kernel version is 6.17.4-2. It is still about 100% increase of idle cpu but not 300/400 %. WSL2 does not like x86-64-X. I am still playing with this to understand what is the best option.Just for reference, updating PVE to 9.1 / Kernel 6.17 did reduce my CPU usage for VM's, including Windows Server 2025
Node CPU: AMD Epyc 9355P, VM Processor Type: x86-64-v4, virtio-win-0.1.271
Node1 Windows Server 2025 VM CPU usage:
View attachment 93485
Node2 Windows Server 2025 VM CPU usage:
View attachment 93487
It will be. See: https://lwn.net/Articles/1064171/https://lwn.net/Articles/1051782/
Code:This series introduces support for Intel Mode-Based Execute Control (MBEC) to KVM and nested VMX virtualization. By exposing MBEC to L2 guests, it enables a dramatic reduction in VMexits (up to 24x) for Windows guests running with Hypervisor-Protected Code Integrity (HVCI), significantly improving virtualization performance.
I'm starting to wonder if AMD will fix this, too.
This is for Intel, right?
I guess this needs to get into the kernel. Qemu also needs to adopt this. Proxmox will follow ...Thank you.
If that means we'll need to patch QEMU after the kernel is patched, it looks like it's going to take a while...
We use essential cookies to make this site work, and optional cookies to enhance your experience.