Hi,
On 27/07/15 03:28, li yuqian wrote:
Hi Jan,
Thanks for your replay :)
>>ah OK; I've grabbed a copy, built and installed it on 2 servers and
ran some test: I get similar figures for 'openssl speed' but those
numbers are artificial, i.e. they do not reflect true performance of
the system. According to the
sitehttp://cryptodev-linux.org/index.htmlI should be getting some
improvement but not *that* much.
i think the cryptodev got much improved with enabled it, take a look
for following what i got test data
-------------
without cryptodev
-------------
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes
aes-128-cbc 158525.06k 214128.67k 242916.10k 250279.55k
253359.45k
-------------
with cryptodev
-------------
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes
aes-128-cbc 45084.53k 191286.30k 656871.75k 3228385.28k
18282905.60k
--------------
compare the 8192 bytes per second processed, with cryptodev up to
18282905.60k, without is only 253359.45k, this is very good improved.
don't look at that times of openssl speed -evp aes-128-cbc
as I wrote in another mail on this list, it's not openvpn but the
'openssl speed' command which fails here:
Try running this openssl command on your box:
date ; cat bigfile | openssl enc -e -aes-256-cbc -bufsize 8192 -pass
pass:testing123 > /dev/null ; date
where 'bigfile' is some large file of > 2 GB in size.
Then rerun it using
date ; cat bigfile | openssl enc -engine cryptodev -e -aes-256-cbc
-bufsize 8192 -pass pass:testing123 > /dev/null ; date
and compare the results of the dates of 'before' and 'after'. On my
hardware I takes ~ 10 seconds to encrypt a 3.3 GB file , with zero
difference whether I use cryptodev or not, whereas 'openssl speed'
reports a 100+ % improvement:
with cryptodev module loaded:
aes-256-cbc 286337.65k 1048423.31k 4589489.60k 19596646.40k
141238272.00k
without cryptodev:
aes-256-cbc 465276.57k 487043.33k 493990.87k 493776.90k
495720.11k
so, apart from the fact that openvpn's speed limitations are not
determined solely by encryption/decryption, this does prove to me that
the cryptodev device offers little if no performance improvement.
hope this clears things up,
JJK
