Speeding up Linux disk encryption
Mar 25, 2020Ignat Korchagin
Summary
This post details the investigation into Linux disk encryption performance, identifying a significant performance penalty. It explains the storage stack, block vs. file encryption, and hardware vs. software encryption choices. The core contribution is the benchmarking of `dm-crypt` on a RAM disk, revealing a substantial performance drop. The post sets the stage for further investigation into optimizing this performance.
More from the Hardware Infrastructure & Performance Optimization trail
- How we reduced core unit boot time from hours to minutes
- A one-line Kubernetes fix that saved 600 hours a year
- Launching Cloudflare’s Gen 13 servers- trading cache for cores for 2x edge compute performance
- Inside Gen 13- how we built our most powerful server yet
- So long, and thanks for all the fish- how to escape the Linux networking stack