[redhat-lspp] LSPP Development Telecon 06/05/2006 Minutes

[Joy Latten]

>SG: Do we know what kind of hits we have with labeled networking.
>GW: Joy did some bench marking for that. I thought she posted the
>results on the list. she was looking for useful tests to test the
>scalability. She also looked at performance with regards to nodes. Joy
>is back now, so hopefully Thursday she'll be back in the office. I'll
>ask her, see if she can post the results.

Resending labeled networking status below. I sent back in April but did
not realize until now I had a typo in email address so redhat-lspp list
never received it. My apologies. 

Joy
---------------------------------------------------------------------------------

The networking hooks using IPSec were stressed with netperf
sending constant stream of tcp and udp packets.
All tests have completed successfully!

All tests had following configuration:
Pseries lpars running FC5
IPSec was configured to use:
 - ESP (Encapsulating Security Payload)
 - security label, "system_u:object_r:unlabeled_t:s0"
SELinux
 - Targeted Policy (targeted-mcs) with IPSec module
   included in base.
 - Enforcing mode

Stress Test 1
 - 24 hour run
 - IPSecv4 in transport mode
 - manual keying (setkey command)

Stress Test 2
 - 48 hour run (over the weekend)
 - IPSecv6 in transport mode
 - manual keying (setkey command)

Stress Test 3
 - 18 hour run
 - IPSecv4 in transport mode
 - dynamic keying (racoon)

Stress Test 4
 - 24 hour run
 - IPSecv4 in tunnel mode
 - manual keying

Stress Test 5
 - 24 hour run
 - IPSecv6 in tunnel mode
 - manual keying

Below is a snapshot of performance between 2 System X(xSeries) machines,
one has 4cpus and the other 8cpus.

******NOTE*****
Numbers IN parenthesis represent numbers taken for
ipsec WITHOUT labels. The number next to it without
parenthesis represent number for ipsec WITH labels.
***************

Testing with the following command line:
/opt/netperf/netperf -t TCP_STREAM -l 60 -H xxxx -i 10,3 -I 99,5 -- -s
57344 -S 57344 -m 4096

TCP STREAM TEST to xxxx : +/-2.5% @ 99% conf. : interval
Recv   Send    Send                          
Socket Socket  Message  Elapsed              
Size   Size    Size     Time     Throughput  
bytes  bytes   bytes    secs.    10^6bits/sec  

262142 114688   4096    60.02      22.87   (23.22)



------------------------------------
Testing with the following command line:
/opt/netperf/netperf -t TCP_STREAM -l 60 -H xxxx -i 10,3 -I 99,5 -- -s
32768 -S 32768 -m 4096

TCP STREAM TEST to xxxx : +/-2.5% @ 99% conf. : interval
!!! WARNING
!!! Desired confidence was not achieved within the specified iterations.
!!! This implies that there was variability in the test environment that
!!! must be investigated before going further.
!!! Confidence intervals: Throughput      :  8.2%
!!!                       Local CPU util  :  0.0%
!!!                       Remote CPU util :  0.0%

Recv   Send    Send                          
Socket Socket  Message  Elapsed              
Size   Size    Size     Time     Throughput  
bytes  bytes   bytes    secs.    10^6bits/sec  

262142  65536   4096    60.01      23.05   (23.02 confidence interval
was not
                                            met, it was 9.8 for
throughput)

------------------------------------
Testing with the following command line:
/opt/netperf/netperf -t TCP_RR -l 60 -H xxxx -i 10,3 -I 99,5 -- -r 1,1

TCP REQUEST/RESPONSE TEST to xxxx : +/-2.5% @ 99% conf. : interval
Local /Remote
Socket Size   Request  Resp.   Elapsed  Trans.
Send   Recv   Size     Size    Time     Rate         
bytes  Bytes  bytes    bytes   secs.    per sec   

16384  87380  1        1       60.00     878.09   (877.30)
65536  262142



------------------------------------
Testing with the following command line:
/opt/netperf/netperf -t UDP_RR -l 60 -H selinux4way -i 10,3 -I 99,5 --
-r 1,1

UDP REQUEST/RESPONSE TEST to selinux4way : +/-2.5% @ 99% conf. :
interval
Local /Remote
Socket Size   Request  Resp.   Elapsed  Trans.
Send   Recv   Size     Size    Time     Rate         
bytes  Bytes  bytes    bytes   secs.    per sec   

107520 107520 1        1       60.00    1105.25  (1105.03)
262142 262142



------------------------------------
Testing with the following command line:
/opt/netperf/netperf -t UDP_RR -l 60 -H selinux4way -i 10,3 -I 99,5 --
-r 516,4

UDP REQUEST/RESPONSE TEST to selinux4way : +/-2.5% @ 99% conf. :
interval
Local /Remote
Socket Size   Request  Resp.   Elapsed  Trans.
Send   Recv   Size     Size    Time     Rate         
bytes  Bytes  bytes    bytes   secs.    per sec   

107520 107520 516      4       60.00     756.26   (689.66 confidence
interval 
262142 262142                                      not met. 57%for
throughput)

------------------------------------
Testing with the following command line:
/opt/netperf/netperf -t UDP_STREAM -l 60 -H selinux4way -i 10,3 -I 99,5
-- -s 32768 -S 32768 -m 4096

UDP UNIDIRECTIONAL SEND TEST to selinux4way : +/-2.5% @ 99% conf. :
interval
Socket  Message  Elapsed      Messages                
Size    Size     Time         Okay Errors   Throughput
bytes   bytes    secs            #      #   10^6bits/sec

 65536    4096   60.00       63460      0      34.66 (34.45)
107520           60.00       40063             21.88 (23.75)




------------------------------------
Testing with the following command line:
/opt/netperf/netperf -t UDP_STREAM -l 60 -H selinux4way -i 10,3 -I 99,5
-- -s 32768 -S 32768 -m 1024

UDP UNIDIRECTIONAL SEND TEST to selinux4way : +/-2.5% @ 99% conf. :
interval
Socket  Message  Elapsed      Messages                
Size    Size     Time         Okay Errors   Throughput
bytes   bytes    secs            #      #   10^6bits/sec

 65536    1024   60.00      217219      0      29.66  (29.18)
107520           60.00      138541             18.91  (20.94)