From owner-freebsd-performance@FreeBSD.ORG Fri Oct 1 08:41:09 2004 Return-Path: Delivered-To: freebsd-performance@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7444316A4CF for ; Fri, 1 Oct 2004 08:41:09 +0000 (GMT) Received: from main.gmane.org (main.gmane.org [80.91.229.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5116943D45 for ; Fri, 1 Oct 2004 08:41:08 +0000 (GMT) (envelope-from gofp-freebsd-performance@m.gmane.org) Received: from root by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 1CDIyQ-0000XC-00 for ; Fri, 01 Oct 2004 10:41:06 +0200 Received: from atoulouse-106-1-6-139.w82-127.abo.wanadoo.fr ([82.127.68.139]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 01 Oct 2004 10:41:06 +0200 Received: from seb.arana by atoulouse-106-1-6-139.w82-127.abo.wanadoo.fr with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 01 Oct 2004 10:41:06 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-performance@freebsd.org From: "seb.arana@aj-form.com" Date: Fri, 01 Oct 2004 10:35:12 +0200 Lines: 217 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: atoulouse-106-1-6-139.w82-127.abo.wanadoo.fr User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803) X-Accept-Language: fr, en Sender: news X-Mailman-Approved-At: Fri, 01 Oct 2004 13:32:48 +0000 Subject: openssl speed performance X-BeenThere: freebsd-performance@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Performance/tuning List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2004 08:41:09 -0000 hi everyone ! i've read some post here and i'm very impressed with the openssl speed results of one member here (called Alexander Portnoy). i've done a "openssl speed" test (ie: localhost# openssl speed ) and here are the results : OpenSSL 0.9.7d 17 Mar 2004 built on: Thu Sep 2 13:20:53 GMT 2004 options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) compiler: cc -DOPENSSL_NO_KRB5 -O available timing options: USE_TOD HZ=128 [sysconf value] timing function used: getrusage The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes md2 2208.94k 5022.69k 7395.43k 8387.66k 8718.08k mdc2 5608.23k 6746.76k 7067.26k 7186.59k 7205.34k md4 10464.94k 39171.28k 128675.70k 272563.86k 382406.67k md5 10965.38k 36964.69k 108454.14k 205642.28k 281639.21k hmac(md5) 15556.94k 52101.15k 136841.21k 230906.92k 288899.00k sha1 7982.98k 24374.08k 57023.14k 87457.63k 103338.64k rmd160 6693.06k 18581.64k 39065.54k 53598.86k 60119.44k rc4 74981.68k 81470.86k 82316.39k 82539.19k 82581.40k des cbc 36209.33k 38050.69k 38383.75k 38540.33k 38476.71k des ede3 14249.97k 14385.57k 14500.45k 14520.82k 14517.76k idea cbc 25050.45k 26717.50k 26971.48k 27178.96k 27148.48k rc2 cbc 21656.55k 22656.62k 22802.68k 22851.90k 22806.19k rc5-32/12 cbc 81936.85k 83839.69k 84596.13k 83844.66k 85239.83k blowfish cbc 75187.71k 78125.75k 77645.32k 78030.15k 77801.55k cast cbc 60307.98k 65169.68k 66580.80k 67096.56k 65486.20k aes-128 cbc 76232.69k 74555.25k 76131.09k 77019.20k 75437.55k aes-192 cbc 68742.33k 66846.01k 68282.29k 68608.32k 67630.10k aes-256 cbc 62000.02k 60375.83k 61263.03k 61193.77k 60780.58k sign verify sign/s verify/s rsa 512 bits 0.0033s 0.0003s 302.4 3267.1 rsa 1024 bits 0.0192s 0.0010s 51.9 1000.2 rsa 2048 bits 0.1237s 0.0036s 8.1 276.5 rsa 4096 bits 0.8446s 0.0131s 1.2 76.1 sign verify sign/s verify/s dsa 512 bits 0.0029s 0.0035s 344.4 285.3 dsa 1024 bits 0.0099s 0.0122s 100.9 81.9 dsa 2048 bits 0.0351s 0.0444s 28.5 22.5 i can't do better than that and when i see the Alexander's post, i'm very surprise.... i've compiled the kernel with makeoptions COPTFLAGS="-O2 -pipe -funroll-loops -march=pentium4 -mfpmath=sse" #optimisation code here is the full kernel config : ############################################## # options pour la compilation ################ ############################################## machine i386 #type de machine : pc compatible makeoptions COPTFLAGS="-O2 -pipe -funroll-loops -march=pentium4 -mfpmath=sse" #optimisation code cpu I686_CPU #noyau pour 686 ident DRAGON #nom du noyeau device apic # I/O apic, HTT options MPTABLE_FORCE_HTT # Enable HTT CPUs with the MP Table options NO_MIXED_MODE # Disable use of mixed mode options CPU_ENABLE_SSE #support des instructions SSE et MMX options CPU_UPGRADE_HW_CACHE #flush des instructions non utilises options PERFMON #utilitaire de monitoring de performan ############################################## # system : SCHEDULER ######################### ############################################## options SCHED_4BSD #scheduler de BSD4 ############################################## #FileSystem ################################## ############################################## options FFS #Berkeley Fast Filesystem options SOFTUPDATES #Enable FFS soft updates support options UFS_ACL #Support for access control lists options UFS_DIRHASH #Improve performance on big directories options MD_ROOT #MD is a potential root device options CD9660 #ISO 9660 Filesystem options PROCFS #Process filesystem (requires PSEUDOFS) options PSEUDOFS #Pseudo-filesystem framework options SYSVMSG #SYSV-style message queues options SYSVSEM #SYSV-style semaphores options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!] options COMPAT_FREEBSD4 #Compatible with FreeBSD4 ######################################### # FIREWALL ############################## ######################################### options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging options IPFILTER_DEFAULT_BLOCK #block all packets by default options PFIL_HOOKS #required by IPFILTER ############################################## # MISC DEVICE ################################ ############################################## ##############support bus device isa device eisa device pci ##############support virgule flottante - obligatoire device npx ##############Add suspend/resume support for the i8254. device pmtimer ##############Misc device pty # Pseudo-ttys (telnet etc) device md # Memory "disks" ##############KEYBOARD & MOUSE device device atkbdc # AT keyboard controller device atkbd # AT keyboard ##############video device device sc # syscons is the default console driver, resembling an SCO console device splash # Splash screen and screen saver support device vga # VGA video card driver device agp # support several AGP chipsets ##############parralel device device ppc device ppbus # Parallel port bus (required) ##############COM device device sio # 8250, 16[45]50 based serial ports # support bus ATA,ATAPI et les peripheriques device ata device ataraid # ATA raid device atadisk # ATA disk drives device atapicd # ATAPI CDROM drives device atapifd # ATAPI floppy drives options ATA_STATIC_ID #Static device numbering # Floppy drives device fdc ############################################## # reseau : INTERFACES ######################### ############################################## device loop #loopback device random # Entropy device device ether #Ethernet Generic device bpf #Berkeley packet Filter device sk ############################################## # reseau : SUPPORT ############################ ############################################## options INET #support IPV4 options IPSEC #ip security options IPSEC_ESP #IP security (crypto; define w/ IPSEC) options IPSTEALTH #forwarding transparent options RANDOM_IP_ID #protection contre hack options SC_DISABLE_DDBKEY #desactive sequance clavier hook options SC_DISABLE_REBOOT # options SC_NO_HISTORY ############################################### # INTERFACES RESEAU PCI ####################### ############################################### device miibus # MII bus support ############################################## # POSIX P1003.1B (1993 posix) ################ ############################################## options _KPOSIX_PRIORITY_SCHEDULING #real time extension options P1003_1B_SEMAPHORES ############################################## # divers ##################################### ############################################## maxusers 0 #le system calcul le nb max de process au boot options DEVICE_POLLING #optimise les bus (chargement des pilotes dyna) options HZ=2000 #polling reseau/cpu ######################################### # CRYPTO SUBSYSTEM ###################### ######################################### device crypto # core crypto support device rndtest # FIPS 140-2 entropy tester ###### MISC options PANIC_REBOOT_WAIT_TIME=16 the GCC wich built the kernel is gcc (GCC) 3.4.2 20040806 (prerelease) [FreeBSD] Copyright (C) 2004 Free Software Foundation, Inc. the sources of kernel are RELENG_5_2 (p10 applied) someone know why my computer (p4 2.4Ghz, 1Go, 120Go SATA RAID1 on promise chipset, MB asus p4c800, FreeBSD 5.2.1R patched) cant perf any more, or better than the Alexander results ? Thanks for ideas :) G'Day ! Seb.