I've collected some performance data with lmbench 2.0-patch1 for a more
recent version of the LSM kernel patch (rev 1.179 in the BitKeeper tree).
The summary is attached, and the relevant information is below. The raw
data is available on request if anyone wants it. One caveat about the
summary and data - you'll notice that the TCP connection establishment
benchmark (lat_connect) has no data at all. I seem to be having a problem
running this particular benchmark on 2.4.9, even the vanilla kernel - it
either hangs indefinitely or produces widely scattered results, so I ran
the tests with lat_connect removed from scripts/lmbench. I've posted a
message to lmbench-users about the problem, and hopefully they'll give
me some insight into it at some point (probably just an error on my part).
Benchmark suite: lmbench-2.0-patch1
Test Platform:
866 MHz Pentium III
L1 I cache 16K D cache 16K
L2 cache 256K
256M RAM and swap
Maxtor 5T040H4, ATA DISK drive
RedHat 7.1
Tested Kernels:
base == vanilla Linux 2.4.9
(base config == default config + network driver as module)
lsm == LSM-patched 2.4.9 Linux kernel (rev 1.179)
(base config, no capabilities, superuser logic)
cap == lsm + built-in capabilities module
(base config + CONFIG_CAPABILITIES=y, capabilities logic)
Note: CONFIG_NETFILTER and CONFIG_LSM_IP were left disabled, since the
NetFilter hooks are not used by the dummy or capabilities module.
Developers of modules that use the NetFilter hooks should also collect
data for base+CONFIG_NETFILTER and lsm+CONFIG_NETFILTER+CONFIG_LSM_IP
in order to see how much overhead is truly added by their particular
modules by factoring out the base NetFilter + LSM hooks overhead.
Methodology:
Ran 'make results' once and discarded results to initialize.
Booted each kernel and ran 'make rerun' 5 times in sequence.
--
Stephen D. Smalley, NAI Labs
ssmalleyat_private
L M B E N C H 2 . 0 S U M M A R Y
------------------------------------
Basic system parameters
----------------------------------------------------
Host OS Description Mhz
--------- ------------- ----------------------- ----
00-base Linux 2.4.9 i686-pc-linux-gnu 866
00-base Linux 2.4.9 i686-pc-linux-gnu 866
00-base Linux 2.4.9 i686-pc-linux-gnu 866
00-base Linux 2.4.9 i686-pc-linux-gnu 866
00-base Linux 2.4.9 i686-pc-linux-gnu 866
01-lsm Linux 2.4.9-l i686-pc-linux-gnu 866
01-lsm Linux 2.4.9-l i686-pc-linux-gnu 866
01-lsm Linux 2.4.9-l i686-pc-linux-gnu 866
01-lsm Linux 2.4.9-l i686-pc-linux-gnu 866
01-lsm Linux 2.4.9-l i686-pc-linux-gnu 866
02-cap Linux 2.4.9-c i686-pc-linux-gnu 866
02-cap Linux 2.4.9-c i686-pc-linux-gnu 866
02-cap Linux 2.4.9-c i686-pc-linux-gnu 866
02-cap Linux 2.4.9-c i686-pc-linux-gnu 866
02-cap Linux 2.4.9-c i686-pc-linux-gnu 866
Processor, Processes - times in microseconds - smaller is better
----------------------------------------------------------------
Host OS Mhz null null open selct sig sig fork exec sh
call I/O stat clos TCP inst hndl proc proc proc
--------- ------------- ---- ---- ---- ---- ---- ----- ---- ---- ---- ---- ----
00-base Linux 2.4.9 866 0.39 0.64 3.88 5.01 29.8 1.03 3.04 121. 1233 6560
00-base Linux 2.4.9 866 0.41 0.65 3.97 5.01 29.7 1.03 3.04 126. 1247 6630
00-base Linux 2.4.9 866 0.39 0.64 3.92 4.96 31.8 1.01 3.04 127. 1267 6622
00-base Linux 2.4.9 866 0.41 0.65 3.97 5.02 28.7 1.03 3.04 127. 1235 6628
00-base Linux 2.4.9 866 0.41 0.66 3.97 5.10 31.4 1.03 3.04 125. 1226 6610
01-lsm Linux 2.4.9-l 866 0.39 0.65 4.13 5.21 29.5 1.01 3.03 125. 1222 6555
01-lsm Linux 2.4.9-l 866 0.41 0.67 4.16 5.24 31.4 1.04 3.04 126. 1222 6581
01-lsm Linux 2.4.9-l 866 0.39 0.66 4.13 5.27 29.4 1.01 3.03 127. 1239 6623
01-lsm Linux 2.4.9-l 866 0.41 0.67 4.23 5.30 30.4 1.03 3.03 124. 1221 6599
01-lsm Linux 2.4.9-l 866 0.41 0.67 4.22 5.37 30.4 1.03 3.03 127. 1251 6607
02-cap Linux 2.4.9-c 866 0.41 0.67 4.16 5.30 29.5 1.03 3.03 122. 1250 6550
02-cap Linux 2.4.9-c 866 0.39 0.66 4.13 5.26 29.5 1.01 3.03 123. 1220 6585
02-cap Linux 2.4.9-c 866 0.41 0.67 4.17 5.33 30.4 1.03 3.03 127. 1239 6651
02-cap Linux 2.4.9-c 866 0.41 0.67 4.16 5.35 32.6 1.03 3.04 144. 1257 6596
02-cap Linux 2.4.9-c 866 0.39 0.65 4.19 5.27 31.3 1.01 3.04 126. 1244 6586
Context switching - times in microseconds - smaller is better
-------------------------------------------------------------
Host OS 2p/0K 2p/16K 2p/64K 8p/16K 8p/64K 16p/16K 16p/64K
ctxsw ctxsw ctxsw ctxsw ctxsw ctxsw ctxsw
--------- ------------- ----- ------ ------ ------ ------ ------- -------
00-base Linux 2.4.9 1.160 4.4500 13.3 6.2300 142.5 32.7 140.2
00-base Linux 2.4.9 1.210 4.4800 14.4 6.9400 142.4 31.4 140.0
00-base Linux 2.4.9 1.150 4.4600 22.0 5.3700 142.4 32.5 139.6
00-base Linux 2.4.9 1.060 4.3900 16.9 5.5400 141.5 33.0 140.8
00-base Linux 2.4.9 1.110 4.3400 13.5 9.2500 140.2 31.8 140.3
01-lsm Linux 2.4.9-l 1.140 4.4100 13.4 6.4900 140.9 36.3 139.8
01-lsm Linux 2.4.9-l 1.200 4.5000 13.3 8.1000 142.3 33.8 140.4
01-lsm Linux 2.4.9-l 1.110 4.5100 13.6 7.6800 142.6 32.9 140.3
01-lsm Linux 2.4.9-l 1.200 4.4400 14.1 6.1800 142.0 33.0 140.5
01-lsm Linux 2.4.9-l 1.150 4.4400 13.3 8.9100 141.2 33.2 140.5
02-cap Linux 2.4.9-c 1.170 4.4200 15.1 6.4100 140.8 34.4 140.1
02-cap Linux 2.4.9-c 1.320 4.4700 18.4 6.8300 140.7 33.8 140.5
02-cap Linux 2.4.9-c 1.260 4.4500 13.6 5.6200 143.6 32.1 140.2
02-cap Linux 2.4.9-c 1.200 4.5100 13.4 7.3800 142.4 31.8 140.0
02-cap Linux 2.4.9-c 1.160 4.4500 13.3 7.0100 142.7 34.3 140.8
*Local* Communication latencies in microseconds - smaller is better
-------------------------------------------------------------------
Host OS 2p/0K Pipe AF UDP RPC/ TCP RPC/ TCP
ctxsw UNIX UDP TCP conn
--------- ------------- ----- ----- ---- ----- ----- ----- ----- ----
00-base Linux 2.4.9 1.160 6.085 10.6 18.0 38.4 24.6 50.3
00-base Linux 2.4.9 1.210 6.172 10.7 18.3 38.5 25.0 50.0
00-base Linux 2.4.9 1.150 6.270 10.9 18.3 39.3 21.8 50.6
00-base Linux 2.4.9 1.060 6.163 10.5 18.3 38.8 24.9 50.9
00-base Linux 2.4.9 1.110 6.369 10.7 18.4 39.0 24.8 50.8
01-lsm Linux 2.4.9-l 1.140 6.149 10.3 17.9 37.5 24.5 50.8
01-lsm Linux 2.4.9-l 1.200 6.229 10.5 18.1 37.0 25.0 51.3
01-lsm Linux 2.4.9-l 1.110 6.157 10.6 18.0 37.5 24.7 51.1
01-lsm Linux 2.4.9-l 1.200 6.317 10.7 18.0 37.9 24.8 51.1
01-lsm Linux 2.4.9-l 1.150 6.330 10.8 18.0 37.9 25.0 51.1
02-cap Linux 2.4.9-c 1.170 6.132 10.6 17.4 37.6 24.2 50.5
02-cap Linux 2.4.9-c 1.320 6.230 10.6 17.6 38.5 24.5 51.3
02-cap Linux 2.4.9-c 1.260 6.400 10.7 17.5 38.6 24.2 51.5
02-cap Linux 2.4.9-c 1.200 6.212 10.8 17.6 38.1 24.9 50.6
02-cap Linux 2.4.9-c 1.160 6.317 10.8 17.5 38.9 24.4 50.9
File & VM system latencies in microseconds - smaller is better
--------------------------------------------------------------
Host OS 0K File 10K File Mmap Prot Page
Create Delete Create Delete Latency Fault Fault
--------- ------------- ------ ------ ------ ------ ------- ----- -----
00-base Linux 2.4.9 35.4 7.8470 134.4 18.6 521.0 0.804 2.00000
00-base Linux 2.4.9 35.4 7.8530 134.4 18.8 546.0 0.803 2.00000
00-base Linux 2.4.9 35.3 7.8140 134.5 18.7 538.0 0.803 3.00000
00-base Linux 2.4.9 35.4 7.8740 134.4 18.8 534.0 0.804 3.00000
00-base Linux 2.4.9 35.4 7.8520 134.9 18.7 576.0 0.803 2.00000
01-lsm Linux 2.4.9-l 35.4 7.8840 135.5 18.7 523.0 0.817 2.00000
01-lsm Linux 2.4.9-l 35.4 7.8590 135.6 18.7 538.0 0.817 2.00000
01-lsm Linux 2.4.9-l 35.5 7.9170 135.8 18.9 529.0 0.817 2.00000
01-lsm Linux 2.4.9-l 35.4 7.9030 135.7 18.8 545.0 0.819 2.00000
01-lsm Linux 2.4.9-l 35.5 7.9090 136.0 18.9 549.0 0.841 2.00000
02-cap Linux 2.4.9-c 35.5 7.8690 136.1 18.8 532.0 0.818 2.00000
02-cap Linux 2.4.9-c 35.4 7.8490 136.8 18.8 553.0 0.819 2.00000
02-cap Linux 2.4.9-c 35.5 7.8320 136.7 18.7 544.0 0.823 2.00000
02-cap Linux 2.4.9-c 35.5 7.8680 136.4 18.8 561.0 0.818 2.00000
02-cap Linux 2.4.9-c 35.4 7.8890 136.7 18.8 543.0 0.819 2.00000
*Local* Communication bandwidths in MB/s - bigger is better
-----------------------------------------------------------
Host OS Pipe AF TCP File Mmap Bcopy Bcopy Mem Mem
UNIX reread reread (libc) (hand) read write
--------- ------------- ---- ---- ---- ------ ------ ------ ------ ---- -----
00-base Linux 2.4.9 737. 489. 162. 353.1 445.0 148.4 144.9 445. 186.5
00-base Linux 2.4.9 738. 443. 133. 353.0 445.0 148.4 144.8 444. 186.5
00-base Linux 2.4.9 736. 280. 255. 352.1 444.8 148.3 144.7 444. 186.5
00-base Linux 2.4.9 733. 452. 177. 352.8 444.9 148.3 144.7 444. 186.5
00-base Linux 2.4.9 729. 290. 164. 351.3 445.2 148.3 144.7 444. 186.5
01-lsm Linux 2.4.9-l 728. 426. 155. 353.0 445.4 148.5 145.0 445. 186.5
01-lsm Linux 2.4.9-l 736. 323. 161. 353.4 445.3 148.3 144.7 445. 186.5
01-lsm Linux 2.4.9-l 716. 474. 160. 352.6 444.9 148.0 144.2 444. 186.3
01-lsm Linux 2.4.9-l 712. 450. 148. 353.0 444.7 147.9 144.2 444. 186.3
01-lsm Linux 2.4.9-l 731. 471. 173. 352.6 444.3 147.9 144.2 444. 186.3
02-cap Linux 2.4.9-c 719. 256. 150. 353.6 444.7 148.3 144.8 444. 186.4
02-cap Linux 2.4.9-c 687. 283. 185. 352.8 444.7 148.3 144.7 444. 186.4
02-cap Linux 2.4.9-c 729. 242. 148. 352.2 444.5 148.3 144.7 444. 186.4
02-cap Linux 2.4.9-c 721. 321. 170. 351.8 444.6 148.2 144.6 444. 186.3
02-cap Linux 2.4.9-c 726. 364. 167. 352.1 444.8 148.2 144.6 444. 186.3
Memory latencies in nanoseconds - smaller is better
(WARNING - may not be correct, check graphs)
---------------------------------------------------
Host OS Mhz L1 $ L2 $ Main mem Guesses
--------- ------------- ---- ----- ------ -------- -------
00-base Linux 2.4.9 866 3.473 8.1040 140.4
00-base Linux 2.4.9 866 3.474 8.1040 140.3
00-base Linux 2.4.9 866 3.473 8.1030 140.3
00-base Linux 2.4.9 866 3.473 8.1140 140.3
00-base Linux 2.4.9 866 3.473 44.5 140.3
01-lsm Linux 2.4.9-l 866 3.473 8.1060 140.4
01-lsm Linux 2.4.9-l 866 3.473 8.1040 140.4
01-lsm Linux 2.4.9-l 866 3.474 8.1060 140.4
01-lsm Linux 2.4.9-l 866 3.473 8.1050 140.4
01-lsm Linux 2.4.9-l 866 3.473 8.1030 140.4
02-cap Linux 2.4.9-c 866 3.473 8.1170 140.4
02-cap Linux 2.4.9-c 866 3.473 8.1040 140.4
02-cap Linux 2.4.9-c 866 3.474 8.1040 140.5
02-cap Linux 2.4.9-c 866 3.473 8.1040 140.5
02-cap Linux 2.4.9-c 866 3.474 8.1040 140.4
_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Thu Aug 30 2001 - 14:01:59 PDT