Re: Performance issue LUKS1 vs LUKS2

Lodewyk van der Westhuizen <[email protected]> Fri, 28 Apr 2023 11:35:29 -0500
Newsgroups dev.linux.lists.cryptsetup
Message-ID <CABOqr=OEyA_gFycqG9_sGm8LmpahFeo9gWqgLfsP_=feGTGt5g@mail.gmail.com>
CORRECTION: the file blocksize (not actual size of the file)

On Fri, Apr 28, 2023 at 11:05 AM Lodewyk van der Westhuizen
<[email protected]> wrote:
>
> I can do that - what kind of information would be helpful to add.
>
> An interesting observation (anecdotal at best) to add is that
> initially there is a whole bunch of kworkers threads and then it goes
> down to a few 2-4 whereas in RedHat 7 the kworker thread count is
> exponentially more. I only see more kworker threads when increasing
> the size of the files being created/deleted (1024K vs 2048K vs 4096K
> etc).
>
> I'm still hoping it's just a parameter/flag that needs to be tuned.
>
> Thanks for all the help.
>
> Regards,
> JL
>
> On Fri, Apr 28, 2023 at 2:28 AM Ondrej Kozina <[email protected]> wrote:
> >
> > On 27. 04. 23 18:08, Lodewyk van der Westhuizen wrote:
> > > Hello Milan,
> > >
> > > Thank you for the response. I'll try to answer your questions as best I can.
> > >
> > >> NOTE: LUKS1 is not cryptsetup version 1.x, it ia a metadata format.
> > >> All recent cryptsetup 2.x versions can use LUKS1 as well - just use "--type luks1"
> > >> in format (so you will compare the same formats on different kernels).
> > > OK let me rephrase, when using luks1 or luks2 the performance slowdown
> > > is still there. The only difference is the version of cryptsetup,
> > > dm-crypt and the kernel.
> > >
> > >> You mean slowdown with access to encrypted data, not unlocking time, right?
> > > Correct, measuring the I/O (creating/deleting files)
> > >
> > >> Which crypto modules are used? What architecture it is - do you use AES-NI
> > > acceleration on both systems?
> > > It's Red Hat for both machines (RHEL7 vs RHEL8).
> >
> > Please open bug on https://bugzilla.redhat.com/ (product RHEL8). It may
> > be system configuration issue unrelated to dm-crypt/cryptsetup. If it
> > turns out to be issue in upstream code as well, I will open upstrem
> > issue for it myself later.
> >
> > Thank you
> > Ondrej
> >