|
|
|
Executive
summary
The performance impact of VPDisk encryption products are 17-23%
on a 1 GHz P4 Server. Faster CPU will improve encryption performance
(see Table 1). This test was done with VPDisk V2.6.2 for RedHat
6.2 Linux.
Purpose
The purpose of this test is to demonstrate a server performance
in an isolated LAN with or without VPDisk program. A mixed of
1 to 60 clients are simulated in the NetBench script with 5 real
Window clients in place. Network performance of accessing the
Server with or without VPDisk on varied ciphers is evaluated.
Setup
A 8-port 10/ 100MBPS dual speed hub with switching (Hawking PN800DH)A
device under test (DUT) server loaded with RedHat 6.2 OS Five PC
clients loaded with Window 98, NetBench 7.0.2 client A PC Controller
loaded with Window 98, MS excel, NetBench 7.0.2 controller
| |
|
| Procedure: |
| Perform Eight (8) tests as
following categories (Table 4): |
 |
No VPDisk:
DUT Server has No VPDisk installed
during the test |
|
VPDisk off:
DUT Server has VPDisk installed but disabled during the test |
|
3DES Hard+:
DUT Server has VPDisk installed, shared directory is hard+
locked encryption with 3DES cipher during the test |
|
DES Hard+:
DUT Server has VPDisk installed, shared directory is hard+
locked encryption with DES cipher during the test |
|
BlowFish Hard+:
DUT Server has VPDisk installed, shared directory is hard+
locked encryption with BlowFish cipher during the test |
|
RC4 Hard+:
DUT Server has VPDisk installed, shared directory is hard+
locked encryption with RC4 cipher during the test |
|
TFE Hard+:
DUT Server has VPDisk installed, shared directory is hard+
locked encryption with TFE cipher during the test |
|
3DES Firm+:
DUT Server has VPDisk installed, shared directory is firm+
locked non-encryption with 3DES cipher during the test |
| Result |
| Two major performance benchmarks , One is Throughput
(Table 2) and another is Response Time (Table 3), are collected
by ZDnet's industrial proven NetBench 7.0.2 program. A summary
of performance impact is as follows: |
|
VPDisk installed but not turned on - No performance impact. |
|
VPDisk installed and perform firm+ lock without encryption
- No performance impact. |
|
Average performance impact depends on varied cipher encryption
algorithm. |
|
Faster CPU improve the encryption performance (* AES was
tested later on 1 GHZ Server). |
| Attachments |
| Table 1: Performance degradation of varied ciphers
among different CPUs |
| |
550 MHZ CPU
(VPDisk vs. non-VPDisk) |
1 GHZ CPU
(VPDisk vs. non-VPDisk) |
Improvement
(1GHz over 550MHz) |
CIPHER
|
TROUGHPUT |
RESPONSE TIME |
|
TROUGHPUT |
RESPONSE TIME |
|
TROUGHPUT |
RESPONSE TIME |
| 3DES |
30.31% |
54.85% |
|
22.35% |
46.89% |
|
26.25% |
14.52% |
| DES |
28.69%
|
53.07% |
|
22.13% |
46.81% |
|
22.87% |
11.78% |
| Blowfish |
30.23%
|
54.92% |
|
22.20% |
46.44% |
|
26.56% |
15.44% |
| RC4 |
29.53%
|
53.90% |
|
22.61% |
47.20% |
|
23.44% |
12.42% |
| TFE |
25.74%
|
48.86% |
|
17.63% |
39.91% |
|
30.80% |
18.32% |
| AES* |
|
|
|
21.81%
|
46.36%
|
|
|
|
|
| Table 2: Total Throughput (550MHZ) |
| |
 |
| Table 3: Average Response Time
(550MHZ) |
| |
 |
| Table 4: Test Procedure |
|
- Connect 5 clients, 1 controller, 1 DUT into a 8-port
10/100 MBPS hub in an isolated environment
- Add IP of controller to each client's hosts file (e.g.
198.187.253.10 controller)
- Perform Test of "No VPDisk":
- Start SMB in the DUT Server
- Mount all clients and controller machines to DUT Server
- Start Controller Clients log-on
- Start each client logon
- Select test mix script in Controller
- Start test
- Collect test result
- Install VPDisk into the DUT Server
- Perform Test of "VPDisk off": (Repeat procedure
3)
- Start VPDisk, hard+ lock (encryption) shared directory
with 3DES cipher
- Perform Test of "3DES Hard+": (Repeat procedure
3)
- Start VPDisk, hard+ lock (encryption) shared directory
with DES cipher
- Perform Test of "DES Hard+": (Repeat procedure
3)
- Start VPDisk, hard+ lock (encryption) shared directory
with BlowFish cipher
- Perform Test of "BlowFish Hard+": (Repeat
procedure 3)
- Start VPDisk, hard+ lock (encryption) shared directory
with RC4 cipher
- Perform Test of "RC4 Hard+": (Repeat procedure
3)
- Start VPDisk, hard+ lock (encryption) shared directory
with TFE cipher
- Perform Test of "TFE Hard+": (Repeat procedure
3)
- Start VPDisk, firm+ lock (no encryption) shared directory
with 3DES cipher
- Perform Test of "3DES Firm+": (Repeat procedure
3)
|
|
| |
Source: Omnisecure
Inc. |
|
|
| |