Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Jan 2010 20:19:05 +0200
From:      Dan Naumov <dan.naumov@gmail.com>
To:        Damian Gerow <dgerow@afflictions.org>,  FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org>, freebsd-fs@freebsd.org
Subject:   Re: ZFS on top of GELI
Message-ID:  <cf9b1ee01001101019o51e9a52fi6d02905914508706@mail.gmail.com>
In-Reply-To: <20100110161206.GA86684@plebeian.afflictions.org>
References:  <cf9b1ee01001100708m7851418cmbb77cc3580d0fab3@mail.gmail.com> <20100110161206.GA86684@plebeian.afflictions.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jan 10, 2010 at 6:12 PM, Damian Gerow <dgerow@afflictions.org> wrot=
e:
> Dan Naumov wrote:
> : I am mostly interested in benchmarks on lower end hardware, the system
> : is an Atom 330 which is currently using Windows 2008 server with
> : TrueCrypt in a non-raid configuration and with that setup, I am
> : getting roughly 55mb/s reads and writes when using TrueCrypt
> : (nonencrypted it's around 115mb/s).
>
> I've been using GELI-backed vdevs for some time now -- since 7.2-ish
> timeframes. =A0I've never benchmarked it, but I was running on relatively
> low-end hardware. =A0A few things to take into consideration:
>
> 1) Make sure the individual drives are encrypted -- especially if they're
> =A0 >=3D1TB. =A0This is less a performance thing and more a "make sure yo=
ur
> =A0 encryption actually encrypts properly" thing.
> 2) Seriously consider using the new AHCI driver. =A0I've been using it in=
 a
> =A0 few places, and it's quite stable, and there is a marked performance
> =A0 improvement - 10-15% on the hardware I've got.
> 3) Take a look at the VIA platform, as a replacement for the Atom. =A0I w=
as
> =A0 running on an EPIA-SN 1800 (1.8GHz), and didn't have any real trouble=
s
> =A0 with the encryption aspect of the rig (4x1TB drives). =A0Actually, if=
 you
> =A0 get performance numbers privately comparing the Atom to a VIA (Nano o=
r
> =A0 otherwise), can you post them to the list? =A0I'm curious to see if t=
he
> =A0 on-chip encryption actually makes a difference.
> 4) Since you're asking for benchmarks, probably best if you post the
> =A0 specific bonnie command you want run -- that way, it's tailored to yo=
ur
> =A0 use-case, and you'll get consistant, comparable results.

Yes, this is what I was basically considering:

new AHCI driver =3D> 40gb Intel SSD =3D> UFS2 with Softupdates for the
system installation
new AHCI driver =3D> 2 x 2tb disks, each fully encrypted with geli =3D> 2
geli vdevs for a ZFS mirror for important data

The reason I am considering the new AHCI driver is to get NCQ support
now and TRIM support for the SSD later when it gets implemented,
although if the performance difference right now is already 10-15%,
that's a reason good enough on it's own. On a semi-related note, is it
still recommended to use softupdates or is GJournal a better choice
today?

- Sincerely,
Dan Naumov



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cf9b1ee01001101019o51e9a52fi6d02905914508706>