Open Stack

On 09-01-19 15:13:29, Dave Holland wrote:
> Hello,
> 
> I've just started investigating Cinder volume encryption using Queens
> (RHOSP13) with a Ceph/RBD backend and the performance overhead is...
> surprising. Some naive bonnie++ numbers, comparing a plain vs encrypted
> volume:
> 
> plain: write 1400MB/s, read 390MB/s
> encrypted: write 81MB/s, read 83MB/s
> 
> The encryption was configured with:
> 
> openstack volume type create --encryption-provider nova.volume.encryptors.luks.LuksEncryptor --encryption-cipher aes-xts-plain64 --encryption-key-size 256 --encryption-control-location front-end LuksEncryptor-Template-256
> 
> Does anyone have a similar setup, and can share their performance
> figures, or give me an idea of what percentage performance impact I
> should expect? Alternatively: is AES256 overkill, or, where should I
> start looking for a misconfiguration or bottleneck?

What's the underlying version of QEMU being used here?

FWIW I can't recall seeing any performance issues when working on and
verifying this downstream with QEMU 2.10.

Cheers,

-- 
Lee Yarwood                 A5D1 9385 88CB 7E5F BE64  6618 BCA6 6E33 F672 2D76
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190110/debbcca3/attachment.sig>