3 ms·
I had a similar experience building a NAS on a SoC. Suddenly things like transport or at rest encryption are no longer perceived to be free but really limit yo
by normaler 5y ago
I had a similar experience building a NAS on a SoC.
Suddenly things like transport or at rest encryption are no longer perceived to be free but really limit your performance.
First time I actually had to be concious about choosing appropriate ciphers and hashing algos and not just using defaults.
- exikyut 5y agoWhat config did you end up setting with, if you happen to have the info easily to hand? I might be able to speed up SSHing to some of the slower hardware I have here. Also, I'm very curious what SoC this was.
- normaler 5y agoIt is/was a RockPro64 with 4GB oft RAM. The biggest issue I had was with zfs native encryption using aes256-gcm per default. The SoC has AES support but with gcm the hashing function is not AES based, so i had to change to aes256-ccm to profit from the AES support. For sshd i severly limit available hmac and cipher to use chacha20 but i also force that in the client side. I will post the relevant lines tomorrow. Wireguard is also costing much more CPU performance then I am used to.
- exikyut 5y agoVery useful to know. Thanks for the reply!