IOMMUGerätezonen

IOMMUGerätezonen is a term used in some technical contexts to describe the memory-access control regions assigned to individual hardware devices under an IOMMU. It refers to the logical zone or domain that defines which memory addresses a device is permitted to access via direct memory access (DMA) and how those addresses are translated. The concept is closely related to the IOMMU's core function of remapping DMA and enforcing memory-protection boundaries between devices and the system memory.

In practice, Gerätezonen are used to isolate devices, support virtualization and PCI passthrough, and provide determinism for memory access. A zone typically specifies what portions of the I/O memory or system RAM a device may use, the translations from IOVA to physical addresses, and the access rights for reads and writes. Zones can be static or dynamically reconfigurable, and devices may be assigned to a particular zone or shared across zones under a single IOMMU domain.

Common implementations relate to IOMMU architectures such as Intel VT-d, AMD-Vi, and ARM SMMU, though the exact terminology and mechanism vary by vendor. In virtualization environments, IOMMUGerätezonen underpin secure device passthrough, preventing a guest from DMA-ing into memory owned by another domain.

Limitations include management complexity, potential performance overhead, and hardware-specific behavior. The term is not universally standardized and may appear primarily in vendor-specific documentation or localized discussions; conceptually it aligns with IOMMU domains, DMA remapping, and device isolation.