Wojciech Puchar wojtek at
Fri Jul 20 16:19:40 UTC 2012

am i doing something wrong? i have processor with AES-NI support.

I've seen a lot of tests showing AES encryption performance to be in order 
of 1GB/s or more.


#mdconfig -a malloc -s2g
#geli init -s 4096 /dev/md0
#geli attach /dev/md0
#dd if=/dev/zero of=/dev/md0.eli
dd: /dev/md0.eli: short write on character device
dd: /dev/md0.eli: end of device
32768+0 records in
32767+1 records out
2147479552 bytes transferred in 14.199564 secs (151235598 bytes/sec)
#dd if=/dev/md0.eli of=/dev/zero bs=64k
32767+1 records in
32767+1 records out
2147479552 bytes transferred in 13.201660 secs (162667389 bytes/sec)

so 150-160MB/s

still faster than encryption without AES-NI but quite a slow.

data from kernel

CPU: Intel(R) Xeon(R) CPU E31220 @ 3.10GHz (3100.03-MHz K8-class CPU)
   Origin = "GenuineIntel"  Id = 0x206a7  Family = 6  Model = 2a  Stepping = 7
   AMD Features=0x28100800<SYSCALL,NX,RDTSCP,LM>
   AMD Features2=0x1<LAHF>
   TSC: P-state invariant
aesni0: <AES-CBC,AES-XTS> on motherboard
GEOM_ELI: Encryption: AES-XTS 128

More information about the freebsd-questions mailing list