PSA encryption performance - 1.9.4 MUCH faster than 2.1.0

All your general support questions for OpenZFS on OS X.

PSA encryption performance - 1.9.4 MUCH faster than 2.1.0

Postby Tsur » Mon Nov 15, 2021 11:33 am

I recently upgraded a server from High Sierra to Mojave and decided to upgrade from ZFS 1.9.4 to 2.1.0
I could not figure out why writes and reads to encrypted data sets were dramatically slower. All the hardware was the exact same. Started troubleshooting my network. Then, just decided to test local copies from an SSD. However, both local and network writes and reads never went above 45 MB/s. I figured it must be Mojave or 2.1.0. Downgrading ZFS was the easier first step.

I uninstalled 2.1.0 and installed 1.9.4 and that instantly fixed the read/write performance. Over the network, the encrypted datasets are now saturating gigabit ethernet. And local writes from the SSD are +250 MB/s. I don't know if this a known issue or perhaps just particular to my setup. But if you too are experiencing really slow performance from you encrypted datasets, it might be 2.1.0

Though, 1.9.4's encrypted performance is so much faster that now I'm slightly worried my files aren't properly encrypted ; ) Maybe there's a reason why 2.1.0 is so much slower - it's actually encrypting the files.
Tsur
 
Posts: 21
Joined: Thu Jan 07, 2016 2:11 pm

Re: PSA encryption performance - 1.9.4 MUCH faster than 2.1.

Postby jawbroken » Tue Nov 16, 2021 3:25 am

It might help to specify what your encryption settings are, if someone gets the chance to look at the regression.
jawbroken
 
Posts: 27
Joined: Wed Apr 01, 2015 4:46 am

Re: PSA encryption performance - 1.9.4 MUCH faster than 2.1.

Postby Tsur » Tue Nov 16, 2021 7:03 am

ˆI agree.
# zfs create -o encryption=on -o keylocation=prompt -o keyformat=passphrase [dataset]

Sorry, the settings were in my previous, misguided, post where I was attempting to force root level file sharing behavior. Just the default, recommended encryption found in the Wiki. I believe the defaults are AES 256 CCM. Earlier in this server's life, I was using Core Storage encryption, which worked great, but was just more of a hassle. I switched to native ZFS a couple years back. Initially, I was worried that my lowly i3-4150 wouldn't be able to handle on-the-fly encryption, but with both Core and native, it worked great with no noticeable performance hit.

Dunno why 2.1.0 is slower.
Tsur
 
Posts: 21
Joined: Thu Jan 07, 2016 2:11 pm


Return to General Help

Who is online

Users browsing this forum: No registered users and 4 guests

cron