From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2j5jIqraVGO1 for ; Thu, 9 Feb 2012 10:34:36 +0100 (CET) Received: from enyo.dsw2k3.info (enyo.dsw2k3.info [195.71.86.239]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.saout.de (Postfix) with ESMTPS for ; Thu, 9 Feb 2012 10:34:35 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by enyo.dsw2k3.info (Postfix) with ESMTP id E04DE98C937 for ; Thu, 9 Feb 2012 10:34:34 +0100 (CET) Received: from enyo.dsw2k3.info ([127.0.0.1]) by localhost (enyo.dsw2k3.info [127.0.0.1]) (amavisd-new, port 10024) with LMTP id jM8eG2YHRnl8 for ; Thu, 9 Feb 2012 10:34:26 +0100 (CET) Received: from citd.de (pD9FF3C12.dip.t-dialin.net [217.255.60.18]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by enyo.dsw2k3.info (Postfix) with ESMTPSA id 9CCC898C928 for ; Thu, 9 Feb 2012 10:34:25 +0100 (CET) Date: Thu, 9 Feb 2012 10:34:23 +0100 From: Matthias Schniedermeyer Message-ID: <20120209093423.GA29945@citd.de> References: <1328567304.90926.YahooMailNeo@web29602.mail.ird.yahoo.com> <20120207081135.GC17107@tansi.org> <20120207083334.GA18260@tansi.org> <1328713497.10971.YahooMailNeo@web29605.mail.ird.yahoo.com> <20120208152645.GA17166@tansi.org> <1328723721.26190.YahooMailNeo@web29606.mail.ird.yahoo.com> <20120209073717.GA3176@tansi.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20120209073717.GA3176@tansi.org> Subject: Re: [dm-crypt] Re : Re : Poor performances with nfs and Kernel 3.x List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On 09.02.2012 08:37, Arno Wagner wrote: > Possible fixes: > 4) get a faster CPU, or one with at least 2 cores if this is > a single core. An AMD Bulldozer(AFAIR) or Intel Core i5 (of Westmere or newer generation, so Core i5 5xx, or Core i5/7 2xxx) or better would have AES-NI. Hardware Acceleration helps tremendously. I have tested copying between a Core i7 2600 and a Core i5 560, i get 100MB/s either with NFS(v3) or via scp (with the intel-acceleration-engine for openssl, so openssl can use AES-NI which it doesn't "as is", altough i also get the necessary speed if i use "arcfour"). The Kernel i tested with was 3.2 on both sides. I ran the test from HDD over Gigabit to tmpfs. To be precise i have to say that i ran the test with loop-aes, but i expect i will get comparable speed after i switch to dm-crypt. When i compared loop-aes to dm-crypt for raw-speed on a tmpfs i got more speed out of dm-crypt(cipher=aes:64-cbc-lmk)). I got 360MB/s for loop-aes vs. 540 MB/s for dm-crypt. But loop-aes needed less cpu. 1 core with 100% for loop-aes vs. 1 core with 100% and 3 cores with 66% from dm-crypt. As only about 20% of max-speed are needed for 100MB/s i think i would get about the same speed if i had used dm-crypt. Bis denn -- Real Programmers consider "what you see is what you get" to be just as bad a concept in Text Editors as it is in women. No, the Real Programmer wants a "you asked for it, you got it" text editor -- complicated, cryptic, powerful, unforgiving, dangerous.