On Jun 2, 2017 11:02, "Mike Pontillo" <[email protected]> wrote:

On Thu, Jun 1, 2017 at 6:28 PM, Dustin Kirkland <[email protected]>
wrote:

> For a while, I ran my MAAS controllers on a rpi2.
>
> Eventually, I abandoned that architecture, once I switched to MAAS HA,
> and tried to instantiate a second MAAS server in a LXD container on an
> x86_64 server.  As it turns out, Postgres does not cluster very well
> across 32-bit armv7l and x86_64.
>
> But, as a single, standalone non-HA MAAS, it ran well enough on a rpi2.
>
> Benchmarking those 1,000,00 hashes takes about 7 seconds there.
>

Interesting; thanks!

This is enough to convince me that 100,000 iterations is probably the sweet
spot. I'd like it to take less than a second to derive the key in the worst
case.


For the record, ecryptfs uses 64K iterations for the key strengthening in
encrypted home directories in Ubuntu.  It's been using that for nearly 10
years across 10s of millions of Ubuntu Desktops, with vastly different
performance profiles.  We've had very, very few performance impact
complaints over that time.

Hope that helps!

Dustin

Regards,
Mike

--
Maas-devel mailing list
[email protected]
Modify settings or unsubscribe at: https://lists.ubuntu.com/
mailman/listinfo/maas-devel
-- 
Maas-devel mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/maas-devel

Reply via email to