RELENG_7 heavy disk = system crawls

[grarpamp]

> cards aren't going to help with zfs.

No, but for geli hifn(4) crypto(4)/(9), geli(8) might work
if aes-cbc is indeed the mode geli uses. See the source I guess.

> Does anyone make a disk controller with crypto built in?

Yes. There are trays and cable dongles and things that do aes/des.
And some drives are coming out with it in firmware. Does anyone
like the cost, closed-source, and trust model of such hardware?

> atacontrol

I'm partly up against this because some failing drives are negotiating
lower speeds for themselves. Never thought of is as a test tool though.

> Pata doesn't do error detection on the control info

ZFS handles that and informs user about silent corruption. Precisely
because of the chained checksums. It's quite addicting.
http://www.opensolaris.org/os/community/zfs/

Your little to no overhead for ffs sounds right as always.
_______________________________________________
freebsd-performance@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to "freebsd-performance-unsubscribe@..."

[Bill Moran-2]

grarpamp <grarpamp@...> wrote:
>
> > cards aren't going to help with zfs.
>
> No, but for geli hifn(4) crypto(4)/(9), geli(8) might work
> if aes-cbc is indeed the mode geli uses. See the source I guess.

Note that only the most expensive cards are faster than a CPU.  Unless you've
got a very large budget, you'll get more bang for your buck out of adding CPUs
to the unit.  During crypto ops, the system will have a spare CPU to use to
encrypt, and when not doing crypto ops, you have the added benefit of more
processing power for apps.

Additionally, support for FreeBSD is spotty.  And we've seen cards that work in
FreeBSD, but do so at far below their claimed throughput.  There are apparently
some inefficiencies in the drivers.

--
Bill Moran
Collaborative Fusion Inc.

wmoran@...
Phone: [phone]x4023

****************************************************************
IMPORTANT: This message contains confidential information
and is intended only for the individual named. If the reader of
this message is not an intended recipient (or the individual
responsible for the delivery of this message to an intended
recipient), please be advised that any re-use, dissemination,
distribution or copying of this message is prohibited. Please
notify the sender immediately by e-mail if you have received
this e-mail by mistake and delete this e-mail from your system.
E-mail transmission cannot be guaranteed to be secure or
error-free as information could be intercepted, corrupted, lost,
destroyed, arrive late or incomplete, or contain viruses. The
sender therefore does not accept liability for any errors or
omissions in the contents of this message, which arise as a
result of e-mail transmission.
****************************************************************
_______________________________________________
freebsd-performance@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to "freebsd-performance-unsubscribe@..."