Search papers, labs, and topics across Lattice.
This paper addresses the performance overhead of analytical queries in Confidential Virtual Machines (CVMs) by identifying a critical hardware-software mismatch in query optimization. The authors propose a lightweight CVM-aware cost calibration method that utilizes existing physical proxies to model data movement and RMP-related translation overheads. Experimental results demonstrate that this approach can recover up to 48% of performance, with some workloads exceeding the performance of traditional KVM setups.
Query optimizers in Confidential Virtual Machines can be recalibrated to recover nearly half of the performance lost due to outdated assumptions.
With the growing adoption of Confidential Computing, running databases in confidential virtual machines (CVMs) such as AMD SEV-SNP has become an attractive way to protect sensitive cloud data with minimal changes to legacy DBMSs. However, analytical queries in such CVMs often suffer substantial overhead, and prior database work has largely stopped at benchmarking these slowdowns rather than optimizing them. We show that this problem stems from a hardware-software mismatch: query optimizers still rely on KVM-oriented (non-encrypted VM) cost assumptions that no longer hold in CVMs. To address this, we propose a lightweight CVM-aware cost calibration. It models two dominant sources of optimizer-facing overhead: data movement and RMP-related translation using simple physical proxies already available to the optimizer. Experiments show that the calibration significantly narrows the KVM/CVM performance gap, recovering up to 48 percent performance and even outperforming the KVM baseline on some workloads.
