Dotaz: Luks performance

[MP]

Ahoj,

nema nekdo nejaka data?

Dell R940, Xeon 6136 3GHz, Perc H740p, 4x SAS12G SSD v R10, fio 75/25 R/W test:

1] no luks: 73k/24k IOPS

2] luks: 54k/18k IOPS

Zasifrovana je primo VG na sdxy, nasledne lv->ext4->fio test.

Propad 26%, je to bezne?

Diky

Odpovědi

[NN]

Mas v biosu povolene AES-NI?

[MP]

System Security Current Value Pending Value

Intel(R) AES-NI Enabled

[MP]

# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1      1483134 iterations per second for 256-bit key
PBKDF2-sha256    1688528 iterations per second for 256-bit key
PBKDF2-sha512    1381523 iterations per second for 256-bit key
PBKDF2-ripemd160 1061311 iterations per second for 256-bit key
PBKDF2-whirlpool  802891 iterations per second for 256-bit key
#  Algorithm | Key |  Encryption |  Decryption
     aes-cbc   128b  1128.1 MiB/s  3449.6 MiB/s
 serpent-cbc   128b    94.6 MiB/s   695.0 MiB/s
 twofish-cbc   128b   209.0 MiB/s   387.8 MiB/s
     aes-cbc   256b   854.5 MiB/s  2771.3 MiB/s
 serpent-cbc   256b    94.5 MiB/s   697.7 MiB/s
 twofish-cbc   256b   208.4 MiB/s   385.4 MiB/s
     aes-xts   256b  1906.0 MiB/s  1887.5 MiB/s
 serpent-xts   256b   676.2 MiB/s   686.8 MiB/s
 twofish-xts   256b   377.3 MiB/s   381.8 MiB/s
     aes-xts   512b  1767.6 MiB/s  1760.7 MiB/s
 serpent-xts   512b   682.1 MiB/s   692.8 MiB/s
 twofish-xts   512b   373.6 MiB/s   373.5 MiB/s


LUKS header information for /dev/sdb1

Version:       	1
Cipher name:   	aes
Cipher mode:   	xts-plain64
Hash spec:     	sha256
Payload offset:	4096
MK bits:       	512