UnderstandingVenusPerformance(TentativeUpdate2003-详解.pptVIP

Sun Confidential/Proprietary - Internal Use Only Understanding Venus Performance(Tentative Update 2003-11-04) Shih-Hao Hung Performance and Availability Eng. Sun Microsystems Inc.Sun Confidential/Proprietary – Internal Use Only Overview Venus is a PCI card that provides the following functionalities for Solaris/SPARC platforms: High-performance gigabit Ethernet interface High-speed cryptographic engine SSL acceleration IPsec acceleration Our goals are to make sure Software (Apps, OS, and drivers) utilize Venus as efficiently as possible. Venus performs under mixed workload. Venus Gigabit Ethernet Venus uses the Cassini chip that is also used by other Sun Gigabit Ethernet cards such as BGCC, Kuheen, etc. One major difference between Venus and other Cassini-based cards – Venus can interrupt only ONE host processor, due to the limitation of the Intel bridge chip on the Venus card. Venus Gigabit Ethernet TCP Performance Measurement New Gigabit Ethernet Features Proposed for Venus 1.1 Venus Crypto Engine Venus has two Broadcom 5821 crypto chips. It is possible for Venus hardware to offload the following crypto operations: Public-key ops: RSA (512-bit, 1024-bit, 2048-bit) and DSA Bulk encryption ops: RC4*, DES, 3DES Hash ops: SHA1 and MD5 * RC4 support is disabled in the Venus 1.0 driver. Software crypto is available for fail-over and small tasks. Our Performance Data We have conducted performance testing on the following platforms: 2-way 900mhz Sun Fire 280R 8-way 900mhz Sun Fire V880 12-way 1200mhz Sun Fire 6800 The per-CPU numbers presented are based on the 900mhz UltraSPARC III cu processor. The Venus Crypto Engine Venus Crypto HardwarePerformance Measurement Venus Crypto SoftwarePerformance Measurement The Venus SSL Performance Venus SSL Support Venus SSL Performance Venus SSLAdditional Performance Issues Enabling HW bulk encryption support cause extra overhead for key management operation: SSL handshake performance is reduced by 33% (BugID 4814633) Short-t