Intelligent Interface for Secure Routing of TCP/IP Connections to the KVM Hypervisor

At the moment, the development of portable devices is a priority for many global organizations, including the industrial and socio-economic sectors. The rapid development of mobile processors of the ARM family, in particular, backward compatibility technologies with x86-64 desktop processors, allows processing of multi-format data. For example, when solving tasks such as running demanding 3D rendering software or neural network processing of dataframes. Recently, this has also become possible due to the Kernel-based Virtual Machine (KVM) technology, which uses all the functional cores of the ARM processor (e.g., Google Pixel Line) as a hypervisor. Using a hypervisor in this variant is possible by providing a privileged second Exception Level for the protected KVM layer (pKVM). At the moment, in this context, the main problem is the lack of means secure development access to such platforms operating in the KVM layer of the hypervisor. The solution to this problem can be described as the interface of intelligent traffic encapsulation between the segments of the virtualized space and the control platform developed in the article. The main interface being implemented is the automated detection of a hypervisor from a chroot environment. As additional features, the article presents an internal authorization algorithm that allows automated authentication based on the RSA and OTP encryption – this approach in a promising direction will allow using an identical set of functions when interacting via LAN /WAN interfaces.