Intel QuickAssist Technology and OpenSSL – Benchmarks and Setup Tips

Discussion in 'STH Main Site Posts' started by Patrick Kennedy, Oct 18, 2016.

  1. #1
    eva2000, niekbergboer and Hank C like this.
  2. MiniKnight

    MiniKnight Well-Known Member

    Joined:
    Mar 30, 2012
    Messages:
    2,722
    Likes Received:
    764
    @Patrick this might be the best and most useful post on STH all year. +like
     
    #2
  3. cesmith9999

    cesmith9999 Well-Known Member

    Joined:
    Mar 26, 2013
    Messages:
    993
    Likes Received:
    300
    This is probably the start of where Add-on FPGA cards will come to play again in the near future. Azure is already using FPGA to help with SDN. instead of a QAT card. Get a FPGA that can do both QAT and other programmable functions.

    Chris
     
    #3
  4. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    231
    Likes Received:
    47
    thanks for sharing !

    out of my budget but nice to see :D
     
    #4
  5. Patrick

    Patrick Administrator
    Staff Member

    Joined:
    Dec 21, 2010
    Messages:
    11,045
    Likes Received:
    3,996
    @eva2000 technically you can get this in very cost effective Atom C2358 chips, albeit with a slower QAT engine.
     
    #5
  6. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    433
    Likes Received:
    102
    I'd like to see aes-128-gcm in addition to -cbc. This mode doesn't require a separate MAC, and can use PCLMULQDQ in combination with the AES-NI instructions on newer CPUs to do SW encryption at rates that become limited by memory bandwidth. I suspect that the level of performance intel has managed to achieve with GCM in its current architecture is why they haven't been pushing on-board QAT much lately--the single purpose encryption accelerators are once again having trouble keeping up with the pace of development of the general purpose CPUs. Your AES benchmark graph doesn't have an X label, but assuming it's kbytes, I'd expect haswell/broadwell to be somewhere around 1GB/s/core (roughly double what you're showing for CBC) and skylake to hit several GB/s/core with larger block sizes (completely smoking the QAT CBC results). I'm extremely curious to see how QAT fares at GCM.
     
    #6
  7. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    231
    Likes Received:
    47
    @Patrick now that OpenSSL 1.1.1 is out openssl.org, any plans to revisit QAT OpenSSL vs software OpenSSL and Nginx HTTP/2 HTTPS SSL benchmarks via h2load HTTP/2 benchmark tool ?

    particularly for rsa2048 and ecdsa performance
    Code:
    openssl speed -multi $(nproc) rsa2048 ecdsap256
    
    FYI, for ECDSA OpenSSL 1.1.1 is up to 40-50% faster than OpenSSL 1.1.0 !

    Oh and OpenSSL 1.1.1 is TLS 1.3 ready - Centmin Mod Nginx servers already support TLS 1.3 via OpenSSL 1.1.1 and BoringSSL if you planning to switch back ;) :D
     
    #7
  8. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    433
    Likes Received:
    102
    That is not my experience. OTOH, the sha acceleration instructions should dramatically change the aes-cbc-hmac-sha1 comparison for chips that support them (even without getting into aes-gcm). It's disappointing that a more rigorous/less softball evaluation of QAT was never done.
     
    #8
  9. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    231
    Likes Received:
    47
    #9
  10. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    433
    Likes Received:
    102
    #10
  11. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    231
    Likes Received:
    47
    #11
Similar Threads: Intel QuickAssist
Forum Title Date
STH Main Site Posts Intel QuickAssist Gets a 2.5x Boost to 100Gbps Feb 21, 2017
STH Main Site Posts Intel QuickAssist at 40GbE Speeds: IPsec VPN Testing Feb 6, 2017
STH Main Site Posts Intel Optane 905P Hits 1.5TB Finally and 380GB M.2 Specs Up Friday at 6:23 AM
STH Main Site Posts Intel Xeon D-2141I Benchmarks and Review 8 Core Skylake-D Monday at 10:02 AM
STH Main Site Posts Intel is Serving Major Xeon Discounts to Combat AMD EPYC Sep 14, 2018

Share This Page