|
OpenBSD Security Functionally paranoid! |
|
Thread Tools | Display Modes |
|
||||
softraid crypto compared to geom_eli (geli)
Encrypted file-system characterizations were performed with bonnie++ on the same machine with the same disk configuration (of course).
OpenBSD-5.4-amd64 softraid crypto (dmesg) Code:
Version 1.97 ------Sequential Output------ --Sequential Input- --Random- Concurrency 1 -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks-- Machine Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP /sec %CP colossus.bohemi 16G 283 99 34870 98 7577 25 359 99 9910 3 158.1 29 Latency 55202us 24219us 40287us 39418us 36989us 492ms Version 1.97 ------Sequential Create------ --------Random Create-------- colossus.bohemia.ne -Create-- --Read--- -Delete-- -Create-- --Read--- -Delete-- files /sec %CP /sec %CP /sec %CP /sec %CP /sec %CP /sec %CP 16 795 60 +++++ +++ 1631 66 799 59 +++++ +++ 1599 68 Latency 79681us 168us 885us 27069us 161us 1008us Code:
Version 1.97 ------Sequential Output------ --Sequential Input- --Random- Concurrency 1 -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks-- Machine Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP /sec %CP colossus 16G 339 99 100724 25 12540 7 628 99 57999 8 449.2 15 Latency 25403us 413ms 2993ms 18898us 391ms 333ms Version 1.97 ------Sequential Create------ --------Random Create-------- colossus -Create-- --Read--- -Delete-- -Create-- --Read--- -Delete-- files /sec %CP /sec %CP /sec %CP /sec %CP /sec %CP /sec %CP 16 630 3 +++++ +++ 1086 3 629 3 +++++ +++ 1066 4 Latency 9551us 207us 1142us 28115us 178us 1170us |
|
|||
Post the output of mount(8) specifying no options.
Soft updates (see Section 14.6 of the FAQ...) may help with your performance concerns. |
|
||||
Quote:
|
|
|||
I understand encrypted hard disks can be useful on a laptop that because of it's use is difficult to secure physically.
But why would you want to put a database on a encrypted RAID5? Please enlighten me
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump |
|
||||
--- I spent several decades in IT infrastructure consulting, sales, marketing and management, specializing in data storage infrastructures . For whatever that may be worth. |
|
|||
I am quite happy with the RAID1 performance, even if my disks are not the better to be paired. I wrote a post weeks about it. I even encrypted a partition on this RAID1. I can say that what I like of softraid is its consistent performace.
A note about encryption on laptops or frequency variable processors: The CPU frequency affects largely to encryption performance. |
|
||||
Quote:
|
|
||||
Quote:
Joking aside, I hear what you're saying. Software is fundamentally fragile; competence is fickle and fleeting. Strategies for probable contingencies can mitigate risk but there is a point at which we all just have to roll the dice and deal with what comes to us. Whoa, shove me into the shallow water. |
|
||||
The test results with six 146GB 10kRPM U320 SCSI disks in a RAID5 array (with HP Smart Array 6404 RAID controller):
Code:
| initialize DB | set scaling factor: 70 | |-------------------+-------------------------| | pgbench -i bench1 | pgbench -i -s 70 bench1 | | Test | command | |--------------+------------------------------------| | Read-Write | pgbench -c 4 -j 2 -T 600 bench1 | | Read-Only | pgbench -c 4 -j 2 -T 600 -S bench1 | | Simple Write | pgbench -c 4 -j 2 -T 600 -N bench1 | Number of transactions processed: | OS / Partition | Read-Write | Read-Only | Simple Write | |-------------------+------------+-----------+--------------| | FreeBSD uncrypted | 207699 | 3037812 | 233599 | | FreeBSD encrypted | 138485 | 2816533 | 201539 | | OpenBSD uncrypted | 91896 | 135979 | 94823 | | OpenBSD encrypted | 72809 | 137021 | 76443 | 64GB partitions were used for all tests. Default configurations for Postgresql, softraid-crypto, and geli were used (basic recipes from the handbook or FAQ). Conclusion: I think there might be something wrong with OpenBSD's ciss(4) driver. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
OpenBSD adds boot(8) support for keydisk-based softraid crypto volumes | J65nko | News | 0 | 12th November 2013 09:24 AM |
geli attach during boot problems | libertas | FreeBSD Installation and Upgrading | 2 | 9th April 2013 01:45 PM |
ZFS stability compared to Solaris | tanked | FreeBSD General | 5 | 26th October 2008 05:43 PM |
FreeBSD + Geli | graudeejs | Guides | 9 | 26th October 2008 10:03 AM |
SOFTRAID(4) | revzalot | OpenBSD Installation and Upgrading | 3 | 27th July 2008 08:40 PM |