samba - Oct 2023 - Low performance when using "server signing" = "mandatory"

Hello,
I'm experiencing very slow read/write performance, about 20 MB/s, on Samba
share when I configure the "server signing" option as
"mandatory". Once I
set "server signing" to "default", the read/write
performance returns to
average speed about 800 MB/s.
I am using Samba 4.9.4 on server with Intel Xeon CPU E5-2690 0 @ 2.90GHz
(32 threads) and 10 Gbit ethernet controller.
I need to set "mandatory" value for security reasons, but the
performance
is unacceptable. How to solve this problem ?

Thank you.
Adam Blaszczykowski

> I'm experiencing very slow read/write performance, about 20 MB/s, on
Samba
> share when I configure the "server signing" option as
"mandatory". (...)
Are you using an AD DC as file server? If you are, you shouldn't. It is not
recommended. As a matter of fact, the recommendation is against doing so.

Am 16.10.2023 um 15:13 schrieb Adam B?aszczykowski via
samba:
> Hello,
> I'm experiencing very slow read/write performance, about 20 MB/s, on
Samba
> share when I configure the "server signing" option as
"mandatory". Once I
> set "server signing" to "default", the read/write
performance returns to
> average speed about 800 MB/s.
> I am using Samba 4.9.4 on server with Intel Xeon CPU E5-2690 0 @ 2.90GHz
> (32 threads) and 10 Gbit ethernet controller.
> I need to set "mandatory" value for security reasons, but the
performance
> is unacceptable. How to solve this problem ?
> 
> Thank you.
> Adam Blaszczykowski
Maybe its related to the samba version ...?
4.9.4 is pretty old ...

On Mon, 16 Oct 2023 15:13:49 +0200
Adam B?aszczykowski via samba <samba at lists.samba.org> wrote:
> Hello,
> I'm experiencing very slow read/write performance, about 20 MB/s, on
> Samba share when I configure the "server signing" option as
> "mandatory". Once I set "server signing" to
"default", the read/write
> performance returns to average speed about 800 MB/s.
> I am using Samba 4.9.4 on server with Intel Xeon CPU E5-2690 0 @
> 2.90GHz (32 threads) and 10 Gbit ethernet controller.
> I need to set "mandatory" value for security reasons, but the
> performance is unacceptable. How to solve this problem ?
Hmm, you need to set a parameter for security reasons, but you are quite
prepared to continue using a 5 year old, EOL version of Samba, a
version that quite likely contains numerous CVE's that have been
fixed in later versions ????

What OS is this on ?

Rowland