On Sat, Oct 29, 2016 at 06:08:37PM +0200, Jonathan Schleifer wrote: > Hm, my main problem seems to be that whenever I decrypt something from the > disk, all other 23 cores seem to get stalled. > > So, would you recommend doing the following then: > > * Have a partition for the main system on a softraid crypto > * Have an unencrypted partition for the LDOMs > * Do softraid crypto in every LDOM
I don't care about encrypting the host. It has no secrets. Some of my guests boot from softraid crypto disks (see 'man boot_sparc64'). > Just out of curiosity, what read performance do you get in one of the LDOMs > where you do use softraid crypto? 2 MB/s just seems too low, IMHO, when > openssl speed can reach 5 times that. On the host (single 3.5" SAS disk which came with the system, no softraid): # dd if=/dev/rsd0c of=/dev/null bs=10m count=50 50+0 records in 50+0 records out 524288000 bytes transferred in 8.658 secs (60551625 bytes/sec) # dd if=/dev/rsd0c of=/dev/null bs=10m count=500 500+0 records in 500+0 records out 5242880000 bytes transferred in 83.572 secs (62734555 bytes/sec) # sysctl hw.ncpu hw.ncpu=2 In a guest which uses softraid crypto as its root disk: # dd if=/dev/rsd0c of=/dev/null bs=10m count=50 50+0 records in 50+0 records out 524288000 bytes transferred in 11.481 secs (45663843 bytes/sec) # dd if=/dev/rsd0c of=/dev/null bs=10m count=500 500+0 records in 500+0 records out 5242880000 bytes transferred in 128.997 secs (40643390 bytes/sec) # sysctl hw.ncpu hw.ncpu=2 Guest disk image files were pre-allocated with dd from /dev/zero.
