-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 17.08.2012 11:47, Grant wrote: >>>> I recently moved my server from: >>>> >>>> 3.2.11-hardened Security Level (Hardened Gentoo [server]) >>>> >>>> to: >>>> >>>> 3.4.5-hardened Configuration Method (Automatic) Usage Type >>>> (Server) Virtualization Type (None) Required Priorities >>>> (Security) >>>> >>>> and http became extremely slow. Some pages that would >>>> normally execute in 1 second would take 10 seconds or more. >>>> There is a lot of php and perl server-side stuff so the >>>> slowdown may have been rooted in that. I changed to Required >>>> Priorities (Performance) and everything sped back up to >>>> normal. My laptop was moved to the following at the same >>>> time and I didn't notice any performance change: >>>> >>>> 3.4.5-hardened Configuration Method (Automatic) Usage Type >>>> (Desktop) Virtualization Type (None) Required Priorities >>>> (Security) >>>> >>>> Is this sort of behavior expected from a server? >>>> >>>> - Grant >>> >>> This may have been a false alarm. I think I've been having >>> intermittent network problems to part of the internet. Can >>> anyone confirm that the above config shouldn't slow down an >>> http server? >>> >>> - Grant >>> >> >> It's hard to make any generalisations but I have some servers >> with similar grsec-autoconfig (server instead of desktop) and no >> noticable slowdown (I'd say nothing more that 10%). I'd recommend >> to use 3.5.1-r2 (testing) or 3.2.27 (stable), though. >> >> WKR Hinnerk > > 3.4.5 is the latest stable, right? > > http://packages.gentoo.org/package/sys-kernel/hardened-sources > > I'm using Server too. I'm using Desktop on my laptop. > > - Grant >
Sorry, I misread the part about the laptop. As far as I remember the only supported versions by Upstream are 2.6.32.59 and 3.2.27 as stable and 3.5.2 as testing (the versions on grsecurity.net, right now). Other versions aren't supported by upstream. Actually I'm not sure what is stable for gentoo since I'm using ~arch myself. - - Hinnerk -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJQLhWiAAoJEJwwOFaNFkYcvy8IANEV6my1npZhaoWYPcZ8Yt65 sdZIKkcbOmkT4ApEaf3p5BuvNU0FFpnCEKbyrw+40M98WNgKYewuOgVJcHMl0aWq fEJKuGTr9KVavgmnUfudSwh12Fyp9huJ9XzakoFsbjidxqM70U5C1H8AS251ml6F ITvG/9erhB+FnZpBhtb4GCFAYb+VP1fnP1SP4ZZvVHuFRk1OOpxiRJzuNn53M6JD 5HQQdOM/6dJYNIPp+7ynTyK+lHYqVkrDDId3pBoLzp9dZxMzTbgAKLfBbaDNm3Uh EXYfi8XvjhDvptJWDV4x9AZghishkseyJDoZwRislAR1pQqG7ypu3iYD7euVM8s= =nv9x -----END PGP SIGNATURE-----
