Bug 13163 - Speed drops considerably when connection is encrypted
Summary: Speed drops considerably when connection is encrypted
Status: RESOLVED WORKSFORME
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: libsmbclient (show other bugs)
Version: 4.7.0
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-11-23 12:13 UTC by Bastien Nocera
Modified: 2020-05-15 07:28 UTC (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Bastien Nocera 2017-11-23 12:13:07 UTC 
Using gvfs's smb backend, which uses libsmbclient, forcing encryption usage if available, the transfer speed reduces from around 26-27 MB/s to around 8-9 MB/s.

Is this a server, or a client problem, or a mix of both?
Comment 1 Stefan Metzmacher 2017-11-23 12:16:27 UTC 
(In reply to Bastien Nocera from comment #0)

Both.

Samba 4.7 supports aes hardware encryption on intel compatible hardware.
configure supports --accel-aes=intelaesni
Comment 2 Bastien Nocera 2017-11-24 13:34:32 UTC 
(In reply to Stefan Metzmacher from comment #1)

That helps a fair bit, it's a shame my server doesn't have any acceleration code available though.
Comment 3 Björn Jacke 2020-05-15 07:27:58 UTC 
starting with 4.11 speed be even better (if hardware supported) as it uses GnuTLS now for encryption. If you have no hardware aes support or if the platform vendor did not submit patches for GnuTLS to support their hardware encryption support (namely IBM for Power and Oracle for Sparc can be mentioned here), then you will still suffer from decreased performance.

If you have a platform with missing GnuTLS HW encryption support, you should file a bug report with the vendors of those platforms; feel free to link that here so we can track  improvements.