🛡️ Intel TDX Technology
Intel TDX (Trust Domain Extensions) is Intel's next-generation confidential computing technology, representing the evolution from application-level to virtual machine-level protection. On the iExec platform, TDX is an experimental technology that offers advanced capabilities for memory-intensive workloads and legacy application migration.
What is Intel TDX?
TDX (Trust Domain Extensions) is Intel's newer confidential computing technology that provides VM-level protection, allowing entire virtual machines to run in secure, isolated environments.
Key TDX benefits
- 🔄 Lift-and-Shift Compatibility: Run existing applications with minimal changes
- 💾 Large Memory Support: Handle memory-intensive workloads (AI, databases)
- 🛡️ VM-Level Protection: Protect entire virtual machines, not just applications
- ⚡ Better Performance: Optimized for complex workloads
TDX: The "Virtual Machine-Level" Security
Intel TDX is like having an entire secure building where you can move your existing operations without major renovations. It protects entire virtual machines.
Key characteristics
- Scope: Protects entire virtual machines
- Memory: Large secure memory space (like a large vault)
- Code Changes: Minimal changes needed - "lift and shift" approach
- Use Case: Ideal for complex applications, legacy systems, and AI workloads
Analogy: TDX is like moving your entire office into a secure building where everything is protected.
Visual representation
TDX Technology Details
How TDX works
- Trust Domain Creation: TDX creates secure virtual machines called "trust domains"
- VM-Level Isolation: Entire virtual machines run in isolated, secure environments
- Large Memory Support: Significantly larger secure memory space compared to SGX
- Legacy Compatibility: Existing applications can run with minimal modifications
TDX Advantages
- Larger Memory: Multi-GB+ secure memory space vs limited SGX memory
- Easier Migration: "Lift and shift" approach for existing applications
- Better Performance: Optimized for complex, memory-intensive workloads
- VM-Level Security: Protects entire virtual machines, not just applications
TDX with iExec
iExec is actively exploring TDX technology to expand the platform's capabilities and prepare for the future of confidential computing.
iExec's TDX Infrastructure
iExec provides experimental TDX support through:
- 🔬 Experimental Worker Pools: Limited TDX-enabled workers for testing
- 📦 TDX Technology Support: Integration with Intel TDX technology
- 🔐 Secret Management Service: SMS support for TDX applications
- 📋 Task Verification: Proof of contribution for TDX executions
- 🔗 Blockchain Integration: Decentralized coordination and payment
iExec TDX Workflow
When to Use TDX
TDX is ideal for:
- 💾 Working with memory-intensive applications
- 🔄 Running existing applications with minimal changes
- 🚀 Running complex workloads with VM-level protection
What's Next?
Learn about the foundation:
- Intel SGX Technology - First-generation application-level TEE technology
- SGX vs TDX Comparison - Detailed comparison of both technologies
Ready to experiment with TDX? Check out the practical guides:
- Build Intel TDX iApp (Experimental) - Build TDX applications with traditional deployment and iApp Generator
- Build Your First TDX iApp - Build TDX applications
For production applications, use SGX:
- Deploy & Run - Create production-ready SGX applications