Hacker News Reader

How does nested KVM work? Are all the page tables handled by the top level? Do the traps have to propagate up?

Yes, the top level uses write protection of guest memory to combine the two levels of translation into one.