samba - Oct 2019 - After configured server signing, file transfer speed is very slow

On Tue, Oct 29, 2019 at 04:46:21PM +0530, VigneshDhanraj G via samba
wrote:
> Hi team,
> 
> I want to configure server signing as mandatory without reducing speed, but
> you have mentioned that remove the server signing.
> Can you please explain why 90% speed is reducing after configured server
> signing as mandatory?
Completely depends on your platform and OS. Are you using hardware
assist for the crypto ? Samba can do so on modern Intel processors
with native AES instructions.

Hi,

Thanks for your reply.

I am not using hardware assist for the crypto. Is any workaround need to do
for increasing speed after configured signing as mandatory?
want to configure signing as mandatory without reducing speed. Whether
need to change any configuration in smb.conf to overcome speed issue?
Interest to know why there is performance degraded when I am using server
signing as mandatory.

Please find the below details:
Samba version : 4.9.3
processor : Intel(R) Atom(TM)
Client : Windows7-10

Thanks,
Vignesh.

On Tue, Oct 29, 2019 at 10:35 PM Jeremy Allison <jra at samba.org> wrote:
> On Tue, Oct 29, 2019 at 04:46:21PM +0530, VigneshDhanraj G via samba wrote:
> > Hi team,
> >
> > I want to configure server signing as mandatory without reducing
speed,
> but
> > you have mentioned that remove the server signing.
> > Can you please explain why 90% speed is reducing after configured
server
> > signing as mandatory?
>
> Completely depends on your platform and OS. Are you using hardware
> assist for the crypto ? Samba can do so on modern Intel processors
> with native AES instructions.
>

Try re-compiling with:

--accel-aes=intelaesni

Later Samba versions will give better improvements, for example the
upcoming Samba 4.12 has improments as detailed here:

https://blog.cryptomilk.org/2019/10/02/samba-and-gnutls/

Finally, see 
https://blogs.technet.microsoft.com/josebda/2010/12/01/the-basics-of-smb-signing-covering-both-smb1-and-smb2/
for some background.

Andrew Bartlett

On Wed, 2019-10-30 at 12:29 +0530, VigneshDhanraj G
wrote:
> Hi, 
> 
> Thanks for your reply. 
> 
> I am not using hardware assist for the crypto. Is any workaround need to do
for increasing speed after configured signing as mandatory?
> want to configure signing as mandatory without reducing speed. Whether 
need to change any configuration in smb.conf to overcome speed issue?
> Interest to know why there is performance degraded when I am using server
signing as mandatory.
> 
> Please find the below details:
> Samba version : 4.9.3
> processor : Intel(R) Atom(TM)
> Client : Windows7-10
> 
> Thanks,
> Vignesh.
> 
> 
> On Tue, Oct 29, 2019 at 10:35 PM Jeremy Allison <jra at samba.org>
wrote:
> > On Tue, Oct 29, 2019 at 04:46:21PM +0530, VigneshDhanraj G via samba
wrote:
> > > Hi team,
> > > 
> > > I want to configure server signing as mandatory without reducing
speed, but
> > > you have mentioned that remove the server signing.
> > > Can you please explain why 90% speed is reducing after configured
server
> > > signing as mandatory?
> > 
> > Completely depends on your platform and OS. Are you using hardware
> > assist for the crypto ? Samba can do so on modern Intel processors
> > with native AES instructions.
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba