VMware vSphere 6.7 U2 includes new scheduler options that secure it from the L1TF vulnerability, while also retaining as much performance as possible.
This paper provides an overview of the security issues, description of this new scheduler option, and the results of performance testing with different scenarios.
Depending on many factors, the overall impact to performance varies, but, in general, the new scheduler option allows for most scenarios to recapture a significant amount of the performance that was lost due to the L1TF security mitigations and patches.
