From owner-freebsd-stable@FreeBSD.ORG Mon Mar 28 18:10:05 2011 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6B0701065674 for ; Mon, 28 Mar 2011 18:10:05 +0000 (UTC) (envelope-from clay@milos.co.za) Received: from lisa.milos.co.za (lisa.milos.co.za [109.169.49.137]) by mx1.freebsd.org (Postfix) with ESMTP id B78BA8FC12 for ; Mon, 28 Mar 2011 18:10:04 +0000 (UTC) Received: (qmail 6477 invoked by uid 89); 28 Mar 2011 17:56:50 -0000 Received: from unknown (HELO claydesktop) (clay@milos.co.za@192.168.200.6) by lisa.milos.co.za with ESMTPA; 28 Mar 2011 17:56:50 -0000 Message-ID: From: "Clayton Milos" To: Date: Mon, 28 Mar 2011 18:57:35 +0100 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931 X-Mailman-Approved-At: Mon, 28 Mar 2011 19:26:16 +0000 Cc: freebsd-stable@freebsd.org Subject: GELI speed X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2011 18:10:05 -0000 Hi Pawel I'm running GELI encryption on a hardware RAID5 (8x1TB), formatted to 6.3T usable space using i386 FreeBSD 7.3-PRERELEASE. Write speeds to the drive are just over 40MB/s which is not too bad but I would like to improve it as the drive gets 270MB/s without encryption. I've run the following tests: dd if=/dev/gzero.eli of=/dev/null bs=1m count=4096 4294967296 bytes transferred in 99.763266 secs (43051591 bytes/sec) and then dd if=/dev/zero of=test.file bs=1m count=1024 1073741824 bytes transferred in 26.118988 secs (41109626 bytes/sec) There is not much speed lost due to the filesystem throughput or the RAID card. I have 2 AMD Opteron 248 (2205.02-MHz 686-class CPU) in the box. I have just bought another motherboard that will accept dual-core and intend on upgrading to 2 dual core CPU's. My next step is to install AMD64 FreeBSD 8.2 to see if this improves performance any. I did not install AMD64 originally because it was giving some issues and I didn't have time to debug it. Will AMD64 have any speed improvement on encryption processing, being 64 bit? Also will having more cores help if I am using the box as a Samba share? I have a Cavium 1230 and Cavium Nitrox XL encryption cards available to me. So far I cannot see any drivers available for them for FreeBSD and even with the SDK I could not write a driver as my knowledge of C is not very good. Would these cards or another supported encryption card that can do AES-CBC 128 help with the speed? Is the GELI provider able to take advantage of encryption coprocessors? Thanks Clay