Intel QuickAssist Technology and OpenSSL – Benchmarks and Setup Tips

Discussion in 'STH Main Site Posts' started by Patrick Kennedy, Oct 18, 2016.

  1. #1
    eva2000, niekbergboer and Hank C like this.
  2. MiniKnight

    MiniKnight Well-Known Member

    Joined:
    Mar 30, 2012
    Messages:
    2,761
    Likes Received:
    780
    @Patrick this might be the best and most useful post on STH all year. +like
     
    #2
  3. cesmith9999

    cesmith9999 Well-Known Member

    Joined:
    Mar 26, 2013
    Messages:
    1,030
    Likes Received:
    313
    This is probably the start of where Add-on FPGA cards will come to play again in the near future. Azure is already using FPGA to help with SDN. instead of a QAT card. Get a FPGA that can do both QAT and other programmable functions.

    Chris
     
    #3
  4. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    236
    Likes Received:
    47
    thanks for sharing !

    out of my budget but nice to see :D
     
    #4
  5. Patrick

    Patrick Administrator
    Staff Member

    Joined:
    Dec 21, 2010
    Messages:
    11,164
    Likes Received:
    4,119
    @eva2000 technically you can get this in very cost effective Atom C2358 chips, albeit with a slower QAT engine.
     
    #5
  6. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    474
    Likes Received:
    110
    I'd like to see aes-128-gcm in addition to -cbc. This mode doesn't require a separate MAC, and can use PCLMULQDQ in combination with the AES-NI instructions on newer CPUs to do SW encryption at rates that become limited by memory bandwidth. I suspect that the level of performance intel has managed to achieve with GCM in its current architecture is why they haven't been pushing on-board QAT much lately--the single purpose encryption accelerators are once again having trouble keeping up with the pace of development of the general purpose CPUs. Your AES benchmark graph doesn't have an X label, but assuming it's kbytes, I'd expect haswell/broadwell to be somewhere around 1GB/s/core (roughly double what you're showing for CBC) and skylake to hit several GB/s/core with larger block sizes (completely smoking the QAT CBC results). I'm extremely curious to see how QAT fares at GCM.
     
    #6
  7. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    236
    Likes Received:
    47
    @Patrick now that OpenSSL 1.1.1 is out openssl.org, any plans to revisit QAT OpenSSL vs software OpenSSL and Nginx HTTP/2 HTTPS SSL benchmarks via h2load HTTP/2 benchmark tool ?

    particularly for rsa2048 and ecdsa performance
    Code:
    openssl speed -multi $(nproc) rsa2048 ecdsap256
    
    FYI, for ECDSA OpenSSL 1.1.1 is up to 40-50% faster than OpenSSL 1.1.0 !

    Oh and OpenSSL 1.1.1 is TLS 1.3 ready - Centmin Mod Nginx servers already support TLS 1.3 via OpenSSL 1.1.1 and BoringSSL if you planning to switch back ;) :D
     
    #7
  8. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    474
    Likes Received:
    110
    That is not my experience. OTOH, the sha acceleration instructions should dramatically change the aes-cbc-hmac-sha1 comparison for chips that support them (even without getting into aes-gcm). It's disappointing that a more rigorous/less softball evaluation of QAT was never done.
     
    #8
  9. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    236
    Likes Received:
    47
    #9
  10. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    474
    Likes Received:
    110
    #10
  11. eva2000

    eva2000 Active Member

    Joined:
    Apr 15, 2013
    Messages:
    236
    Likes Received:
    47
    #11
Similar Threads: Intel QuickAssist
Forum Title Date
STH Main Site Posts Intel QuickAssist Gets a 2.5x Boost to 100Gbps Feb 21, 2017
STH Main Site Posts Intel QuickAssist at 40GbE Speeds: IPsec VPN Testing Feb 6, 2017
STH Main Site Posts Lenovo Publishes its 1.2V Intel Optane DC Persistent Memory Guidelines Nov 14, 2018
STH Main Site Posts ASRock Rack Intel Xeon E-2100 Motherboards Spotted Nov 11, 2018
STH Main Site Posts Supermicro SYS-5019C-MR Review A 1U Intel Xeon E-2100 Powerhouse Nov 8, 2018

Share This Page