From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <gentoo-user+bounces-200275-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by finch.gentoo.org (Postfix) with ESMTPS id 9133B158020
for <garchives@archives.gentoo.org>; Sun, 18 Dec 2022 20:31:03 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id E737CE090E;
Sun, 18 Dec 2022 20:30:58 +0000 (UTC)
Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(No client certificate requested)
by pigeon.gentoo.org (Postfix) with ESMTPS id 6730FE0895
for <gentoo-user@lists.gentoo.org>; Sun, 18 Dec 2022 20:30:58 +0000 (UTC)
Received: by mail-lj1-x22e.google.com with SMTP id s10so7304788ljg.1
for <gentoo-user@lists.gentoo.org>; Sun, 18 Dec 2022 12:30:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=xx/sLxt05u9e4Tic9nRn6K71Mfz1bGng+QD+dOwtA60=;
b=OaBhriXXy0FDO9+7TIR7YTI0NVTzXL6xhi8fsG+bSPGzN5SHm/PYAZDBvTg4HiPvAx
UmBoU6P5uEQO7qmfQesQDVJKwd3Wn8TAffhTW3LcIsaVDpIGa9gtVYeU8Xotrnz6/puD
xno/yQQt++dwbQuqWoEelwGFXtB88Pr3kIvUPAGieJBnyiSK0A4ctaRj61wcluASju/t
0kc7zLc84CmJQX8nmqH104F+F3pGxW05p1DK41gdOn0dYMxwvRMZ515950wLd2h7G+C+
DVcWEPaiGP1o+7UzC6vZ8+l0lQBUtQaxn/884rc6V2iQHmq9q/HKdWbY5sI6mCL+DfzM
tXjA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=xx/sLxt05u9e4Tic9nRn6K71Mfz1bGng+QD+dOwtA60=;
b=qZzcJnDPBjV+jt0ASJC/zUv2/6oYntjnM4q1gjge1NOdabMSXTSgrMR1PcBaRH7WP3
BRWvrgKT4NOOKDk4v+fYVq/GKvNdMcO4C53fPFE4IFrNnemDyteG+cp4GSs9NtPXCvXx
fnPMxh7JF5LO2r/f5yr86odgPbT0nyGmaUF7NnJQtFH59dRGW5a7NVScTW/1tYsTeREf
yJDFJVXd1cc2JAD6pGtNZXX96lO57+v4YBsv375cMZsKpU/YJLEemKisTEtmSCXSm2dw
cH42z18xbPT3yqchhtc55E0SW+FImdJU6ZJzIfPZQLtqkiQw3m/sW+FYPAU8Pcl/O0m+
/mmA==
X-Gm-Message-State: ANoB5pmTEgEFZvL1qNkMgT9GwGIWiBvMVO6rWqCH2eA7dO/Za+we65fz
DuKe2VYPzKpTlHEJHZ+9HYdKkfNeS3xLkPv3PUFPvCUJ82o=
X-Google-Smtp-Source: AA0mqf5yEZrZujPc8YV3dIxgJI4qsFSg0ikWYnaqxS7GHMIfGwFSj17K5v3AQ6+2lt5nC3IN+0pHBBS3WHFMfNAYJA0=
X-Received: by 2002:a2e:a4a9:0:b0:279:c7c4:2fde with SMTP id
g9-20020a2ea4a9000000b00279c7c42fdemr14035605ljm.360.1671395456411; Sun, 18
Dec 2022 12:30:56 -0800 (PST)
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
MIME-Version: 1.0
References: <7a8384d4-4213-b2df-df28-2b56a8b2d030@youngman.org.uk>
<CAK2H+efdzK2sEn5xz-oXtp52d2tzjHwY-ieyrFhmq40hh1yawg@mail.gmail.com>
<cf466820-b40c-b27d-1f48-a84189c9c9bc@gmail.com> <CAK2H+ecyN0mritZsGmF=F+GbsoHW8US__DiTGAbQ31zbbtsJ9A@mail.gmail.com>
<fbe3b3c2-360f-e115-2bfc-18f34b6d0377@gmail.com> <CAK2H+ed-FcEKO1kRF1cnGFn6HC4jXLyT4PkKyO1bDic=rKiLbg@mail.gmail.com>
<CAK2H+ef3An3+uCQs-c6MpVx_VC3civwzjxRu=1-D8HtxoOg9Ew@mail.gmail.com>
<4206127f-0a76-4957-d6e1-11ab383ce205@users.sourceforge.net>
<CAK2H+ecwdToRNXw-nN8QF3ctX-HmhgKJhWbGTcrw7RL7OfD6Bg@mail.gmail.com>
<2969e3b8-eb12-1236-282f-5debea83439e@gmail.com> <Y59qXm3503dZHoK9@tp> <CAGfcS_kVCykc5LwWm7eH=gytJ4FTOq-zgd6Hb9_qUV-nXvOJ2w@mail.gmail.com>
In-Reply-To: <CAGfcS_kVCykc5LwWm7eH=gytJ4FTOq-zgd6Hb9_qUV-nXvOJ2w@mail.gmail.com>
From: Mark Knecht <markknecht@gmail.com>
Date: Sun, 18 Dec 2022 13:30:45 -0700
Message-ID: <CAK2H+efPfaq2RdBr1RCZea9Xyg-t-CnJfNSusuC35YJZGArLpA@mail.gmail.com>
Subject: Re: Living in NGL: was: [gentoo-user] NAS and replacing with larger drives
To: gentoo-user@lists.gentoo.org
Content-Type: multipart/alternative; boundary="000000000000756d8305f02014c8"
X-Archives-Salt: 11277956-2027-40ff-b5f2-00f60c37e2ef
X-Archives-Hash: 7300160aa95fb7c5acf035845feb93a9
--000000000000756d8305f02014c8
Content-Type: text/plain; charset="UTF-8"
On Sun, Dec 18, 2022 at 1:07 PM Rich Freeman <rich0@gentoo.org> wrote:
>
> On Sun, Dec 18, 2022 at 2:30 PM Frank Steinmetzger <Warp_7@gmx.de> wrote:
> >
> > Am Sun, Dec 18, 2022 at 01:07:43PM -0600 schrieb Dale:
> >
> > > Mostly, I need a better CPU. If I encrypt anyway.
> >
> > Did you ever tell us the exact CPU you have in there? All I can
remember is
> > it has 4 cores. And some AMD processor with a II in its name, but that
was
> > you main rig, right?
>
> What encryption algorithm are you using? You should see if this is
> hardware-accelerated in the kernel for your CPU, or if not if there is
> another strong algorithm which is. Most newer CPUs will tend to have
> hardware support for algorithms like AES, and the kernel will use
> this. This will greatly improve CPU performance.
>
> I've run into this issue with zfs on Raspberry Pis. ZFS does the
> encryption internally, and the openzfs code didn't have support for
> ARM hardware encryption the last time I checked (this could have
> changed). I found that dm-crypt works MUCH better on Pis as a result,
> as the kernel does have ARM encryption hardware support.
>
> Again, this all depends on the algorithm. If you're using something
> exotic odds are the hardware won't handle it natively.
>
> --
> Rich
Great background info Rich. Thanks.
If Dale would supply us with the first few lines of the following command I
think it would help
mark@truenas1:~ $ sysctl hw
hw.machine: amd64
hw.model: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
hw.ncpu: 4
Note that hw.ncpu isn't actually cores but rather threads. My
processor has just 2 cores.
I don't know how to get the CPU flags on FreeBSD nor
how to determine if encryption is hardware or software
based on TrueNAS. Given some time I might Google
that.
Cheers,
Mark
--000000000000756d8305f02014c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><br><br>On Sun, Dec 18, 2022 at 1:07 PM Rich Freeman <<=
a href=3D"mailto:rich0@gentoo.org">rich0@gentoo.org</a>> wrote:<br>><=
br>> On Sun, Dec 18, 2022 at 2:30 PM Frank Steinmetzger <<a href=3D"m=
ailto:Warp_7@gmx.de">Warp_7@gmx.de</a>> wrote:<br>> ><br>> >=
Am Sun, Dec 18, 2022 at 01:07:43PM -0600 schrieb Dale:<br>> ><br>>=
; > > Mostly, I need a better CPU.=C2=A0 If I encrypt anyway.<br>>=
><br>> > Did you ever tell us the exact CPU you have in there? Al=
l I can remember is<br>> > it has 4 cores. And some AMD processor wit=
h a II in its name, but that was<br>> > you main rig, right?<br>><=
br>> What encryption algorithm are you using?=C2=A0 You should see if th=
is is<br>> hardware-accelerated in the kernel for your CPU, or if not if=
there is<br>> another strong algorithm which is.=C2=A0 Most newer CPUs =
will tend to have<br>> hardware support for algorithms like AES, and the=
kernel will use<br>> this.=C2=A0 This will greatly improve CPU performa=
nce.<br>><br>> I've run into this issue with zfs on Raspberry Pis=
.=C2=A0 ZFS does the<br>> encryption internally, and the openzfs code di=
dn't have support for<br>> ARM hardware encryption the last time I c=
hecked (this could have<br>> changed).=C2=A0 I found that dm-crypt works=
MUCH better on Pis as a result,<br>> as the kernel does have ARM encryp=
tion hardware support.<br>><br>> Again, this all depends on the algor=
ithm.=C2=A0 If you're using something<br>> exotic odds are the hardw=
are won't handle it natively.<br>><br>> --<br>> Rich<br><br>Gr=
eat background info Rich. Thanks.<br><br>If Dale would supply us with the f=
irst few lines of the following command I think it would help<br><br>mark@t=
ruenas1:~ $ sysctl hw<br>hw.machine: amd64<br>hw.model: Intel(R) Core(TM) i=
3-2120 CPU @ 3.30GHz<br>hw.ncpu: 4<br><br><br>Note that hw.ncpu isn't a=
ctually cores but rather threads. My <br>processor has just 2 cores.<div><b=
r></div><div>I don't know how to get the CPU flags on FreeBSD nor=C2=A0=
</div><div>how to determine if encryption is hardware or software=C2=A0</di=
v><div>based on TrueNAS. Given some time I might Google=C2=A0</div><div>tha=
t.=C2=A0=C2=A0<br><br>Cheers,<br>Mark<br></div></div>
--000000000000756d8305f02014c8--