From owner-freebsd-stable@FreeBSD.ORG Sun Jan 10 18:19:14 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 549E3106566C; Sun, 10 Jan 2010 18:19:14 +0000 (UTC) (envelope-from dan.naumov@gmail.com) Received: from mail-yw0-f197.google.com (mail-yw0-f197.google.com [209.85.211.197]) by mx1.freebsd.org (Postfix) with ESMTP id F20218FC0C; Sun, 10 Jan 2010 18:19:13 +0000 (UTC) Received: by ywh35 with SMTP id 35so11746504ywh.7 for ; Sun, 10 Jan 2010 10:19:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=5jFEha+NBhRM4oBl9F0mD5JdJeVZq6ocYW1/Nn4eQ6o=; b=NRSwrMZas38FdHj20tKP4WUXqU1HnkCQD5ZUOFfTFrpA8WOcoPTrTqw6auPrDFs8g3 47Kgmik0BXhp51bcUtLIKgIr90bw25pJNtUSFid3qaEXAUCCKnHtlmfhW91JPJWHAXec 0Wrad8/g6GRMiXcyTEy98Vw5R6S33OcigQdzM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=tfhFe60NdB/aIHjdaYF5z3QjJ+RE7LlUwrRzscoZZBJsHhhvdofIsn7UcKNwvJp3Md ZHiFQBw/KWVo3Zg9WsPx+qnMHe8v+X1WrZZxSOqp9tE1TuBmtwF3CWCljVcTwsx8AFYw jvGbGBoOwE2qohDIXlO+SpCmv559iw02Bs+J0= MIME-Version: 1.0 Received: by 10.101.3.8 with SMTP id f8mr8763013ani.149.1263147545575; Sun, 10 Jan 2010 10:19:05 -0800 (PST) In-Reply-To: <20100110161206.GA86684@plebeian.afflictions.org> References: <20100110161206.GA86684@plebeian.afflictions.org> Date: Sun, 10 Jan 2010 20:19:05 +0200 Message-ID: From: Dan Naumov To: Damian Gerow , FreeBSD-STABLE Mailing List , freebsd-fs@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: Subject: Re: ZFS on top of GELI X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jan 2010 18:19:14 -0000 On Sun, Jan 10, 2010 at 6:12 PM, Damian Gerow wrot= e: > Dan Naumov wrote: > : I am mostly interested in benchmarks on lower end hardware, the system > : is an Atom 330 which is currently using Windows 2008 server with > : TrueCrypt in a non-raid configuration and with that setup, I am > : getting roughly 55mb/s reads and writes when using TrueCrypt > : (nonencrypted it's around 115mb/s). > > I've been using GELI-backed vdevs for some time now -- since 7.2-ish > timeframes. =A0I've never benchmarked it, but I was running on relatively > low-end hardware. =A0A few things to take into consideration: > > 1) Make sure the individual drives are encrypted -- especially if they're > =A0 >=3D1TB. =A0This is less a performance thing and more a "make sure yo= ur > =A0 encryption actually encrypts properly" thing. > 2) Seriously consider using the new AHCI driver. =A0I've been using it in= a > =A0 few places, and it's quite stable, and there is a marked performance > =A0 improvement - 10-15% on the hardware I've got. > 3) Take a look at the VIA platform, as a replacement for the Atom. =A0I w= as > =A0 running on an EPIA-SN 1800 (1.8GHz), and didn't have any real trouble= s > =A0 with the encryption aspect of the rig (4x1TB drives). =A0Actually, if= you > =A0 get performance numbers privately comparing the Atom to a VIA (Nano o= r > =A0 otherwise), can you post them to the list? =A0I'm curious to see if t= he > =A0 on-chip encryption actually makes a difference. > 4) Since you're asking for benchmarks, probably best if you post the > =A0 specific bonnie command you want run -- that way, it's tailored to yo= ur > =A0 use-case, and you'll get consistant, comparable results. Yes, this is what I was basically considering: new AHCI driver =3D> 40gb Intel SSD =3D> UFS2 with Softupdates for the system installation new AHCI driver =3D> 2 x 2tb disks, each fully encrypted with geli =3D> 2 geli vdevs for a ZFS mirror for important data The reason I am considering the new AHCI driver is to get NCQ support now and TRIM support for the SSD later when it gets implemented, although if the performance difference right now is already 10-15%, that's a reason good enough on it's own. On a semi-related note, is it still recommended to use softupdates or is GJournal a better choice today? - Sincerely, Dan Naumov