Bacula-users

Re: [Bacula-users] HW crypto offload

2011-10-30 13:03:37
Subject: Re: [Bacula-users] HW crypto offload
From: Guy <guy AT britewhite DOT net>
To: Alex Crow <acrow AT integrafin.co DOT uk>
Date: Sun, 30 Oct 2011 16:40:04 +0000
The quickest way to find out is to configure a backup without crypto and see 
how long it takes. You could also do another test with GZIP compression on/off. 

---Guy
(via iPhone)

On 30 Oct 2011, at 16:23, Alex Crow <acrow AT integrafin.co DOT uk> wrote:

> 
>>> If it is supported in any way, I'd be happy to know. If not, what would
>>> be the best way about getting it implemented?
>> I'd want to be pretty sure its going to help before doing this. On my
>> (somewhat aged) development machine, OpenSSL can do AES-128 CBC at 55
>> MB/s (bytes, not bits), so it doesn;t sound like crypto is necessarily
>> your bottleneck.
>> 
>> Also, crypto "accelerators" rarely do in my experience.
>> 
> 
> Ben,
> 
> CPU is:
> 
> model name      : Intel(R) Xeon(R) CPU           E5540  @ 2.53GHz
> 
> We run 4 backup threads and get 4 cores doing 100% each, still we're 
> only getting the 80 Megabits.
> 
> Here's the part of the bacula-fd.conf that is relevant:
> 
> FileDaemon {
>     Name = backup-fd
>     FDport = 9102
>     WorkingDirectory = /var/lib/bacula
>     Pid Directory = /var/run
>     Maximum Concurrent Jobs = 20
>     FDAddress = 127.0.0.1
> 
>     PKI Signatures = Yes
>     PKI Encryption = Yes
>     PKI Keypair = "/etc/bacula/keys/bacula-fd.pem"
>     PKI Master Key = "/etc/bacula/keys/master.cert"
> }
> 
> Here's an example job spec:
> 
> Job {
>     Name = "ias"
>     JobDefs = "Standard"
>     Schedule = "With-Basejobs"
>     FileSet = "ias"
>     Accurate = yes
>     Base = "ias-base"
> }
> 
> Job {
>     Name = "ias-base"
>     Level = Base
>     JobDefs = "Standard"
>     FileSet = "ias"
>     Schedule = "Update-Basejobs"
>     Accurate = yes
> }
> 
> FileSet {
>     Name = "ias"
>     Include {
>         Options {
>             BaseJob  = pmugcs5
>             Accurate = mcs5
>             Verify   = pin5
>             signature = MD5
>             compression=GZIP
>         }
>         File = /nas/ias
>     }
>     Exclude {
>         File = /nas/exclude
>     }
> }
> 
> Storage def from bacula-dir.conf:
> 
> Storage {
>     Name = Tandberg
>     Address = 127.0.0.1
>     SDPort = 9103
>     Password = "e3Ci8AxSF2ewxzX2VgaU"
>     Device = Tandberg
>     Autochanger = yes
>     Media Type = LTO3
>     Maximum Concurrent Jobs = 20
>     AllowCompression = yes
> }
> 
> Devices in bacula-sd.conf:
> 
> Autochanger {
>     Name = Tandberg
>     Device = IBM0, IBM1
>     Changer Device = /dev/sg6
>     Changer Command = "/usr/lib64/bacula/mtx-changer %c %o %S %a %d"
> }
> 
> Device {
>     Name = IBM0
>     Drive Index = 0
>     Media Type = LTO3
>     Archive Device = /dev/st0
>     AutomaticMount = yes;
>     AlwaysOpen = yes;
>     RemovableMedia = yes;
>     RandomAccess = no;
>     Autochanger = yes;
>     Maximum Concurrent Jobs = 2
>     Spool Directory = "/opt/spool/ibm0"
> }
> 
> Device {
>     Name = IBM1
>     Drive Index = 1
>     Media Type = LTO3
>     Archive Device = /dev/st1
>     AutomaticMount = yes;
>     AlwaysOpen = yes;
>     RemovableMedia = yes;
>     RandomAccess = no;
>     Autochanger = yes;
>     Maximum Concurrent Jobs = 2
>     Spool Directory = "/opt/spool/ibm1"
> }
> 
> Could it be the "compression=GZIP" in the job defs that is slowing 
> things down?
> 
> I really should get my colleague to join this as he's the one that set 
> this up.
> 
> Cheers
> 
> Alex
> 
> 
> 
> 
> -- 
> This message is intended only for the addressee and may contain
> confidential information.  Unless you are that person, you may not
> disclose its contents or use it in any way and are requested to delete
> the message along with any attachments and notify us immediately.
> 
> "Transact" is operated by Integrated Financial Arrangements plc
> Domain House, 5-7 Singer Street, London  EC2A 4BQ
> Tel: (020) 7608 4900 Fax: (020) 7608 5300
> (Registered office: as above; Registered in England and Wales under number: 
> 3727592)
> Authorised and regulated by the Financial Services Authority (entered on the 
> FSA Register; number: 190856)
> 
> 
> ------------------------------------------------------------------------------
> Get your Android app more play: Bring it to the BlackBerry PlayBook 
> in minutes. BlackBerry App World&#153; now supports Android&#153; Apps 
> for the BlackBerry&reg; PlayBook&#153;. Discover just how easy and simple 
> it is! http://p.sf.net/sfu/android-dev2dev
> _______________________________________________
> Bacula-users mailing list
> Bacula-users AT lists.sourceforge DOT net
> https://lists.sourceforge.net/lists/listinfo/bacula-users

Attachment: smime.p7s
Description: S/MIME cryptographic signature

------------------------------------------------------------------------------
Get your Android app more play: Bring it to the BlackBerry PlayBook 
in minutes. BlackBerry App World&#153; now supports Android&#153; Apps 
for the BlackBerry&reg; PlayBook&#153;. Discover just how easy and simple 
it is! http://p.sf.net/sfu/android-dev2dev
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
<Prev in Thread] Current Thread [Next in Thread>