Am 29.06.2013 22:23, schrieb Bill Davidsen:
> Mateusz Marzantowicz wrote:
>> On 28.06.2013 17:21, j.witvl...@mindef.nl wrote:
>>> It surely works, but at a performance price. And the certainty that you 
>>> have to enter the LUKS-key each time you
>>> boot.
>>
>> Intel Sandy/Ivy Bridge processors and later (AMD also) have something
>> called AES-NI which significantly speeds up disk encryption. I haven't
>> done any benchmarks but I see no difference between encrypted and plain
>> LVM in everyday use.
>>
> I just discovered that KVM doesn't seem to pass that flag on to virtual 
> machines, which seems like serious suckage.
> May be a hardware thing, of course

this has nothing to do with the hardware
the hardware has AES-NI or has not

VMware vSphere passes the flag to the guest

cat /proc/cpuinfo | grep aes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr
sse sse2 ss ht syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts nopl 
xtopology tsc_reliable nonstop_tsc
aperfmperf pni pclmulqdq ssse3 cx16 sse4_1 sse4_2 popcnt aes hypervisor lahf_lm 
ida arat epb pln pts dtherm

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Reply via email to