Re: luks disk encryption benchmarks

[Travis H.]

On Tue, Jun 05, 2007 at 07:00:51PM -0500, Travis H. wrote:
> I just did some performance testing on a file server (debian 4.0) and
> thought I'd share the figures, both raw and using the luks
> cryptosystem described here:
> 
> http://luks.endorphin.org/about
> 
> Here's the specs:
> 
> AMD Athlon 64 x2 3600+ (1800MHz)
> 2GB 800MHz DDR2 ECC DRAM
> Asus M2N32WS motherboard
> 3ware 9650SE SATA RAID controller (PCI Express) in PCI Express x16 slot
> 4 Seagate SATA-II 500GB 7200 RPM drives with NCQ in RAID 10 configuration
> 16kB stripe size
> Debian 4.0 stable (etch)
> 
> My hunch is that over NFS, even with gigabit ethernet, there will be no 
> measurable
> difference between encrypted and non-encrypted storage.

raw over NFS:

Version  1.03       ------Sequential Output------ --Sequential Input- --Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  /sec %CP
nfsclient        4G 16756  61 40475  21 12033   9 15669  85 15564   6 445.8   3
                    ------Sequential Create------ --------Random Create--------
                    -Create-- --Read--- -Delete-- -Create-- --Read--- -Delete--
              files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
                 16  2329  12  8480  32  4185  22  1857  10  9742  27  3692  18
nfsclient,4G,16756,61,40475,21,12033,9,15669,85,15564,6,445.8,3,16,2329,12,8480,32,4185,22,1857,10,9742,27,3692,18

crypt over NFS:

Version  1.03       ------Sequential Output------ --Sequential Input- --Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  /sec %CP
nfsclient        4G 16416  61 33488  13 10666   9 14084  73 16143   7 392.7   3
                    ------Sequential Create------ --------Random Create--------
                    -Create-- --Read--- -Delete-- -Create-- --Read--- -Delete--
              files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
                 16  2218  12  7444  25  4248  20  2288  12  9401  28  3575  15
nfsclient,4G,16416,61,33488,13,10666,9,14084,73,16143,7,392.7,3,16,2218,12,7444,25,4248,20,2288,12,9401,28,3575,15

So... yeah, pretty minimal - IMHO, not worth worrying about.

-- 
``To know love, be like the running brook, which though deaf,
  sings its melody for others to hear.'' -- Master Po, "Kung Fu"
<URL:http://www.subspacefield.org/~travis/> -><- dharma <>< advaita
For a good time on my UBE blacklist, email [EMAIL PROTECTED]

pgp0t6UIV8S0K.pgp
Description: PGP signature