Storage KVM-Romania-1gbps-2tb hdd-10tb traffic/mo Only 50 in stock !

cociu

Hello people ,

like i have promised we will offer in very limited stock (only 50 for the moment) follow config in our dc from Oradea/Romania (norway will be offered in BF) :

Storage kvm 2tb

1 core (E5-2450L) fair share.
1 gb ram
2 tb Hdd
10tb traffic/mo
1 ipv4
1gbps port speed

price : 50 eur/year or 101 EUR/3years https://secure.hostsolutions.ro/cart.php?a=add&pid=479

Usual questions what people ask :

can you combine 2 orders in one ? my answer is : NO
can i buy aditional traffic in such offers ? my answer is : NO
Will offer this special offer in Norway ? My answer is yes but will be in BF and will be limited quantity.
Do you offer custom iso ? my answer : for the moment no but if you search in my other threads some customer do this via novnc console.
Do you offer ipv6 ? my answer ... for the moment no and is not a priority for hostsolutions to implement this in the near future .
Is the offer recurring ? my answer is : i am not adept to up the price so almost sure yes is recurring except some external terms , like electrical cost , ip cost but all this we will see past 3 years.

Aditional ip cost ? 1 eur/mo.

The port speed is shared so if you do all day/night traffic try to stay under 200mbps.

Delivery time for the first 20 orders is estimated 2 hours. The rest one monday/tuesday .

Any question related to this offer please post here , other comments if is not related please respect this thread.

Thanks ,
Marius

zhujiwiki

Nice offer.

default

Good offer, but wasn't this supposed to be a surprise for Black Friday and Cyber Monday?

cociu

@default said: Good offer, but wasn't this supposed to be a surprise for Black Friday and Cyber Monday?

will be another xx in BF , we just want to avoid overload in this days

ps20090

2TB at almost 34 Euro/year that’s very impressive.

I have like 85$ Credit in my host solutions account, is it possible I can pay partial with that and then rest with my credit card?

cociu

@ps20090 said: I have like 85$ Credit in my host solutions account, is it possible I can pay partial with that and then rest with my credit card?

yes no problem.

default

@cociu said:

@default said: Good offer, but wasn't this supposed to be a surprise for Black Friday and Cyber Monday?

will be another xx in BF , we just want to avoid overload in this days

That overload is what makes Black Friday madness interesting. By the time a consumer asks himself: "Is it worth it?" or "Should I get this?" or "Will server be useful?" ... the offer is already sold out, and consumer goes into non-buyer remorse. It's the beauty of Black Friday.

ps20090

Hey off-topic but I can edit or reply to my previous post as I am on iPad but there is apply credit option in invoice. But you need to go on unpaid invoice first and then the option will show up. I applied credit and then paid rest with credit card. Very nice cociu, amazing offer and thanks for applying credit in unpaid invoice so easy. Wish you success in your company. I am very happy with your service.

cociu

@default said: That overload is what makes Black Friday madness interesting. By the time a consumer asks himself: "Is it worth it?" or "Should I get this?" or "Will server be useful?" ... the offer is already sold out, and consumer goes into non-buyer remorse. It's the beauty of Black Friday.

true , but in the other hand for us is a huge preassure with many chanse to faill so i prefere do this offers before and focus in BF in something what we have not offered until now , have some plans.

cociu

@ps20090 said: Hey off-topic but I can edit or reply to my previous post as I am on iPad but there is apply credit option in invoice. But you need to go on unpaid invoice first and then the option will show up. I applied credit and then paid rest with credit card. Very nice cociu, amazing offer and thanks for applying credit in unpaid invoice so easy. Wish you success in your company. I am very happy with your service.

thanks man , also i am glad when i see my customers is happy. I think your order is in the first 20 so will be activated soon.

chocolateshirt

This is a dracula offer.. premm..

ofit

wait on BF prem prem dracula offer

default

@ofit said:
wait on BF prem prem dracula offer

Too many offers like these, and we will be left without blood soon. We will then become vampire sisters, on the darkest night of the Blackest Friday, in the year of the Lord 2020.

Thank God price of silver is going up (1 silver ounce = 20 eur), so people can no longer banish our tempting blood-sucking VPS offers.

Happy Halloween.

drunkendog

Bought one! Absolutely amazing price! Accidentally made a second invoice tho so you probably want to remove that

default

@drunkendog said:
Bought one! Absolutely amazing price! Accidentally made a second invoice tho so you probably want to remove that

Happy to see you happy. You won't need to ask for a slot anymore

default

@cociu - does this offer include Raid10, like the previous 1TB offers?

ofit

@cociu most interesting question what CPU performance?

chocolateshirt

@ofit said:
@cociu most interesting question what CPU performance?

Still the same cpu as previous offer, so GB4 around 950-1200 and GB5 around 250-300

ravul

Sorry for the newbie querie, I am a new user. Is it possible to add this storage to google drive to increase storage?

lentro

Did you implement instant provisioning? My VPS came very fast

cociu

@drunkendog said: Bought one! Absolutely amazing price! Accidentally made a second invoice tho so y

@lentro said: Did you implement instant provisioning? My VPS came very fast

is romania , our home and one node was already prepared , so i think you have been in the first 20 orders for this ....

lentro

@ravul said: Sorry for the newbie querie, I am a new user. Is it possible to add this storage to google drive to increase storage?

This is a listing for what's called a VPS, or Virtual Private Server. Basically, it's a remote Linux computer with the specs listed. Imagine having an additional computer with a lot of storage. That doesn't increase your Google Drive storage, and neither does this. However, you can upload your files to this instead, assuming you have enough Linux experience to set it up.

Galeej

@lentro said:

@ravul said: Sorry for the newbie querie, I am a new user. Is it possible to add this storage to google drive to increase storage?

This is a listing for what's called a VPS, or Virtual Private Server. Basically, it's a remote Linux computer with the specs listed. Imagine having an additional computer with a lot of storage. That doesn't increase your Google Drive storage, and neither does this. However, you can upload your files to this instead, assuming you have enough Linux experience to set it up.

Additionally you can mount google drive and copy between them.

seenu

yeah, something like rclone will do the job pretty well.

serv_ee

@lentro said:

@ravul said: Sorry for the newbie querie, I am a new user. Is it possible to add this storage to google drive to increase storage?

This is a listing for what's called a VPS, or Virtual Private Server. Basically, it's a remote Linux computer with the specs listed. Imagine having an additional computer with a lot of storage. That doesn't increase your Google Drive storage, and neither does this. However, you can upload your files to this instead, assuming you have enough Linux experience to set it up.

Holy shit..an actual polite response with detailed information.

Gotta check this day in my calendar.

seenu

anyone got any bench scores?

chocolateshirt

@seenu said:
anyone got any bench scores?

If you look for CPU bench, GB4 score around 950-1200 and GB5 score around 250-300

ps20090

@seenu said: anyone got any bench scores?

Tell me what scripts to run to benchmark and I will run and post results.

-------------------------------------------------
 nench.sh v2019.07.20 -- https://git.io/nench.sh
 benchmark timestamp:    2020-10-31 21:36:09 UTC
-------------------------------------------------

Processor:    Common KVM processor
CPU cores:    1
Frequency:    1795.672 MHz
RAM:          985M
Swap:         -
Kernel:       Linux 4.15.0-122-generic x86_64

Disks:
sda      2T  HDD

CPU: SHA256-hashing 500 MB
    8.732 seconds
CPU: bzip2-compressing 500 MB
    14.099 seconds
CPU: AES-encrypting 500 MB
    9.098 seconds

ioping: seek rate
    min/avg/max/mdev = 133.0 us / 367.5 us / 79.2 ms / 1.59 ms
ioping: sequential read speed
    generated 8.95 k requests in 5.00 s, 2.18 GiB, 1.79 k iops, 447.3 MiB/s

dd: sequential write speed
    1st run:    156.40 MiB/s
    2nd run:    237.46 MiB/s
    3rd run:    172.62 MiB/s
    average:    188.83 MiB/s

IPv4 speedtests
    your IPv4:    xxxx.xxxx.xxxx.xxxx

    Cachefly CDN:         81.77 MiB/s
    Leaseweb (NL):        22.03 MiB/s
    Softlayer DAL (US):   4.05 MiB/s
    Online.net (FR):      18.10 MiB/s
    OVH BHS (CA):         8.42 MiB/s

No IPv6 connectivity detected
-------------------------------------------------

Everyone must be bench-marking the new server, installing scripts so that's why it might be slow but usually it performs much much better.

default

@ps20090 said:

@seenu said: anyone got any bench scores?

Tell me what scripts to run to benchmark and I will run and post results.

YABS

curl -sL yabs.sh | bash

ps20090

@default said: YABS

# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #
#              Yet-Another-Bench-Script              #
#                     v2020-09-21                    #
# https://github.com/masonr/yet-another-bench-script #
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #

Sat Oct 31 22:47:10 UTC 2020

Basic System Information:
---------------------------------
Processor  : Common KVM processor
CPU cores  : 1 @ 1795.672 MHz
AES-NI     : ❌ Disabled
VM-x/AMD-V : ❌ Disabled
RAM        : 985M
Swap       : 0B
Disk       : 2.0T

fio Disk Speed Tests (Mixed R/W 50/50):
---------------------------------
Block Size | 4k            (IOPS) | 64k           (IOPS)
  ------   | ---            ----  | ----           ---- 
Read       | 8.85 MB/s     (2.2k) | 4.55 MB/s       (71)
Write      | 8.89 MB/s     (2.2k) | 4.78 MB/s       (74)
Total      | 17.75 MB/s    (4.4k) | 9.34 MB/s      (145)
           |                      |                     
Block Size | 512k          (IOPS) | 1m            (IOPS)
  ------   | ---            ----  | ----           ---- 
Read       | 4.07 MB/s        (7) | 8.50 MB/s        (8)
Write      | 4.59 MB/s        (8) | 9.63 MB/s        (9)
Total      | 8.66 MB/s       (15) | 18.13 MB/s      (17)

iperf3 Network Speed Tests (IPv4):
---------------------------------
Provider        | Location (Link)           | Send Speed      | Recv Speed     
                |                           |                 |                
Clouvider       | London, UK (10G)          | 819 Mbits/sec   | 211 Mbits/sec  
Online.net      | Paris, FR (10G)           | 806 Mbits/sec   | 319 Mbits/sec  
WorldStream     | The Netherlands (10G)     | 816 Mbits/sec   | 290 Mbits/sec  
Wifx            | Zurich, CH (10G)          | 812 Mbits/sec   | 295 Mbits/sec  
Biznet          | Jakarta, Indonesia (1G)   | 620 Mbits/sec   | 65.2 Mbits/sec 
Clouvider       | NYC, NY, US (10G)         | 780 Mbits/sec   | 269 Mbits/sec  
Velocity Online | Tallahassee, FL, US (10G) | 635 Mbits/sec   | 140 Mbits/sec  
Clouvider       | Los Angeles, CA, US (10G) | busy            | busy           
Iveloz Telecom  | Sao Paulo, BR (2G)        | busy            | busy           

Geekbench 5 test failed. Run manually to determine cause.

ps20090

@default said: YABS

How do I run Geekbench? I tried to run manually from commands on internet and it stopped in the middle, no score or URL given in end

Geekbench 5 is in tryout mode.

Geekbench 5 requires an active Internet connection when in tryout mode, and 
automatically uploads test results to the Geekbench Browser. Other features 
are unavailable in tryout mode.

Buy a Geekbench 5 license to enable offline use and remove the limitations of 
tryout mode.

If you would like to purchase Geekbench you can do so online:

  https://store.primatelabs.com/v5

If you have already purchased Geekbench, enter your email address and license 
key from your email receipt with the following command line:

  ./geekbench5 -r <email address> <license key>

  Running Gathering system information
System Information
  Operating System              Ubuntu 18.04.5 LTS 4.15.0-122-generic x86_64
  Model                         QEMU Standard PC (i440FX + PIIX, 1996)
  Motherboard                   N/A
  BIOS                          SeaBIOS rel-1.13.0-48-gd9c812dda519-prebuilt.qemu.org

Processor Information
  Name                          Common KVM processor
  Topology                      1 Processor, 1 Core
  Identifier                    GenuineIntel Family 15 Model 6 Stepping 1
  Base Frequency                1.79 GHz
  L1 Instruction Cache          32.0 KB
  L1 Data Cache                 32.0 KB
  L2 Cache                      4.00 MB
  L3 Cache                      16.0 MB

Memory Information
  Size                          985 MB


Single-Core
  Running AES-XTS
  Running Text Compression
  Running Image Compression
  Running Navigation
  Running HTML5
  Running SQLite
  Running PDF Rendering
  Running Text Rendering
  Running Clang
  Running Camera
  Running N-Body Physics
  Running Rigid Body Physics
  Running Gaussian Blur

default

Don't worry about Geekbench. It's ok without it. Thank you.

ofit

@ps20090 You need create swap. Than Geekbench will run ok.

# Initialise swap file
dd if=/dev/zero of=/swapfile count=1024 bs=1M
# Protect it from snooping
chown root.root /swapfile
chmod 600 /swapfile
# Make it into a swap file
mkswap /swapfile
# Mount swap file
swapon /swapfile
# Make it mounted at reboot
cp -av /etc/fstab /etc/fstab.bck
echo /swapfile swap swap defaults 0 0 >> /etc/fstab # Care!! '>>'

ps20090

@default said: Don't worry about Geekbench. It's ok without it. Thank you .

curl -sL yabs.sh | bash -s -- -9
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #
#              Yet-Another-Bench-Script              #
#                     v2020-09-21                    #
# https://github.com/masonr/yet-another-bench-script #
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #

Sat Oct 31 23:12:14 UTC 2020

Basic System Information:
---------------------------------
Processor  : Common KVM processor
CPU cores  : 1 @ 1795.672 MHz
AES-NI     : ❌ Disabled
VM-x/AMD-V : ❌ Disabled
RAM        : 985M
Swap       : 0B
Disk       : 2.0T

fio Disk Speed Tests (Mixed R/W 50/50):
---------------------------------
Block Size | 4k            (IOPS) | 64k           (IOPS)
  ------   | ---            ----  | ----           ---- 
Read       | 9.22 MB/s     (2.3k) | 5.40 MB/s       (84)
Write      | 9.26 MB/s     (2.3k) | 5.71 MB/s       (89)
Total      | 18.48 MB/s    (4.6k) | 11.11 MB/s     (173)
           |                      |                     
Block Size | 512k          (IOPS) | 1m            (IOPS)
  ------   | ---            ----  | ----           ---- 
Read       | 10.64 MB/s      (20) | 21.03 MB/s      (20)
Write      | 11.75 MB/s      (22) | 23.08 MB/s      (22)
Total      | 22.39 MB/s      (42) | 44.11 MB/s      (42)

iperf3 Network Speed Tests (IPv4):
---------------------------------
Provider        | Location (Link)           | Send Speed      | Recv Speed     
                |                           |                 |                
Clouvider       | London, UK (10G)          | 838 Mbits/sec   | 273 Mbits/sec  
Online.net      | Paris, FR (10G)           | 846 Mbits/sec   | 324 Mbits/sec  
WorldStream     | The Netherlands (10G)     | 809 Mbits/sec   | 361 Mbits/sec  
Wifx            | Zurich, CH (10G)          | 793 Mbits/sec   | 265 Mbits/sec  
Biznet          | Jakarta, Indonesia (1G)   | 597 Mbits/sec   | 54.6 Mbits/sec 
Clouvider       | NYC, NY, US (10G)         | 767 Mbits/sec   | 176 Mbits/sec  
Velocity Online | Tallahassee, FL, US (10G) | 716 Mbits/sec   | 169 Mbits/sec  
Clouvider       | Los Angeles, CA, US (10G) | busy            | busy           
Iveloz Telecom  | Sao Paulo, BR (2G)        | busy            | busy           

Geekbench 4 Benchmark Test:
---------------------------------
Test            | Value                         
                |                               
Single Core     | 1299                          
Multi Core      | 1240                          
Full Test       | https://browser.geekbench.com/v4/cpu/15848806

Geekbench 5 test failed. Run manually to determine cause.

seenu

@ps20090 said: Model QEMU Standard PC (i440FX + PIIX, 1996) 🙄

chocolateshirt

@seenu said:

@ps20090 said: Model QEMU Standard PC (i440FX + PIIX, 1996)

🙄

You could ask them to enable AES-NI

seenu

I strongly think...this is toooo old CPU.

just running rsync from another vps and running top shows rsync, sshd commands using 90+% cpu

default

Plot twist: storage running on Pentium 1 processor.

itoffshore

To help people install custom isos:

As noted earlier in this thread CTRL B at the ipxe prompt:

dhcp doesn't work @hostsolutions ipxe prompt so you need to set a static ip:

set net0/ip 1.2.3.4
set net0/netmask 255.255.252.0
set net0/gateway 5.6.7.8
set dns 9.9.9.9
ifopen net0
chain --autofree http://boot.netboot.xyz

cociu

@itoffshore said: To help people install custom isos:

As noted earlier in this thread CTRL B at the ipxe prompt:

dhcp doesn't work @hostsolutions ipxe prompt so you need to set a static ip:

set net0/ip 1.2.3.4

set net0/netmask 255.255.252.0
set net0/gateway 5.6.7.8
set dns 9.9.9.9
ifopen net0
chain --autofree http://boot.netboot.xyz

We are agree with such practice but i want to advert some "windows" users/aplication , this package was not created to have huge cpu consumition/usage so to prevent suspend ora any discution better to know before use it.

itoffshore

@cociu - they make great Alpine Linux boxes ;o)

ps20090

I dunno what Cociu did with network, but I can playback ISOs via Plex (sort of Virtual Mount Drive to playback ISOs remotely, doesn't take a lot of CPU when Direct Play) at 1080p without transcoding and it plays smoothly, without stutters or anything.

Pilzbaum

Thanks for the mention however

@itoffshore said:

dhcp doesn't work @hostsolutions ipxe prompt so you need to set a static ip:

was certainly not the case for my nvme kvm in Romania. For me, dhcp worked just fine. Interesting that it appers to be different across nodes.. Weird

itoffshore

@Pilzbaum the dhcp issue was on a kvm that was recently created (converted after OpenVZ was phased out).

Overall it's been fine.

I now have iPXE set as a boot option for a Rescue ISO

seenu

@ps20090 said:
I dunno what Cociu did with network, but I can playback ISOs via Plex (sort of Virtual Mount Drive to playback ISOs remotely, doesn't take a lot of CPU when Direct Play) at 1080p without transcoding and it plays smoothly, without stutters or anything.

probably you are lucky!

for me just rsync is enough for cpu to reach 100%

chocolateshirt

@seenu said:

@ps20090 said:
I dunno what Cociu did with network, but I can playback ISOs via Plex (sort of Virtual Mount Drive to playback ISOs remotely, doesn't take a lot of CPU when Direct Play) at 1080p without transcoding and it plays smoothly, without stutters or anything.

probably you are lucky!

for me just rsync is enough for cpu to reach 100%

Are you running rsync inside cociu VPS? Or running it from other VPS?

seenu

@chocolateshirt said:

@seenu said:

@ps20090 said:
I dunno what Cociu did with network, but I can playback ISOs via Plex (sort of Virtual Mount Drive to playback ISOs remotely, doesn't take a lot of CPU when Direct Play) at 1080p without transcoding and it plays smoothly, without stutters or anything.

probably you are lucky!

for me just rsync is enough for cpu to reach 100%

Are you running rsync inside cociu VPS? Or running it from other VPS?

running rsync from other vps
i.e. copying from other vps to cociu's vps.

chocolateshirt

I see.. you could try to reduce the transfer to 2 files at a time, by default rsync transfer 4 files at a time..

Demindiro

I found it strange that AES-NI is disabled since the E5-2450L does support it. I went digging around a bit and found this page which explains how you can force AES-NI usage. I had to set the env variable to OPENSSL_ia32cap=0x200000000000400 instead though (notice the lack of a + character). The kernel module also works.

Benchmark before forcing AES-NI:

[email protected]:~/aes_ni_force# openssl speed -elapsed -evp aes-128-cbc
You have chosen to measure elapsed time instead of user CPU time.
Doing aes-128-cbc for 3s on 16 size blocks: 7694123 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 64 size blocks: 1685387 aes-128-cbc's in 3.01s
Doing aes-128-cbc for 3s on 256 size blocks: 552983 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 307286 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 38000 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 16384 size blocks: 20698 aes-128-cbc's in 3.00s
OpenSSL 1.1.1  11 Sep 2018
built on: Wed May 27 19:15:54 2020 UTC
options:bn(64,64) rc4(8x,int) des(int) aes(partial) blowfish(ptr) 
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -fdebug-prefix-map=/build/openssl-dyPhHZ/openssl-1.1.1=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-128-cbc      41035.32k    35835.47k    47187.88k   104886.95k   103765.33k   113038.68k

[email protected]:~# cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1       226768 iterations per second for 256-bit key
PBKDF2-sha256     286809 iterations per second for 256-bit key
PBKDF2-sha512     216647 iterations per second for 256-bit key
PBKDF2-ripemd160  200109 iterations per second for 256-bit key
PBKDF2-whirlpool  168256 iterations per second for 256-bit key
argon2i       4 iterations, 147985 memory, 4 parallel threads (CPUs) for 256-bit key (requested 2000 ms time)
argon2id      4 iterations, 143659 memory, 4 parallel threads (CPUs) for 256-bit key (requested 2000 ms time)
#     Algorithm | Key |  Encryption |  Decryption
        aes-cbc   128b    67.1 MiB/s    67.8 MiB/s
    serpent-cbc   128b    22.7 MiB/s   100.1 MiB/s
    twofish-cbc   128b    52.3 MiB/s    53.7 MiB/s
        aes-cbc   256b    61.4 MiB/s    61.8 MiB/s
    serpent-cbc   256b    27.4 MiB/s    99.2 MiB/s
    twofish-cbc   256b    53.1 MiB/s    57.2 MiB/s
        aes-xts   256b    32.8 MiB/s    72.5 MiB/s
    serpent-xts   256b    79.7 MiB/s    83.1 MiB/s
    twofish-xts   256b    52.4 MiB/s    54.8 MiB/s
        aes-xts   512b    57.7 MiB/s    30.5 MiB/s
    serpent-xts   512b    82.4 MiB/s    98.2 MiB/s
    twofish-xts   512b    49.3 MiB/s    53.5 MiB/s

Benchmark after forcing AES-NI:

[email protected]:~/aes_ni_force# env OPENSSL_ia32cap=0x200000200000000 openssl speed -elapsed -evp aes-128-cbc
You have chosen to measure elapsed time instead of user CPU time.
Doing aes-128-cbc for 3s on 16 size blocks: 43118080 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 64 size blocks: 13080886 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 256 size blocks: 2908108 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 854302 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 95311 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 16384 size blocks: 46607 aes-128-cbc's in 3.00s
OpenSSL 1.1.1  11 Sep 2018
built on: Wed May 27 19:15:54 2020 UTC
options:bn(64,64) rc4(8x,int) des(int) aes(partial) blowfish(ptr) 
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -fdebug-prefix-map=/build/openssl-dyPhHZ/openssl-1.1.1=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-128-cbc     229963.09k   279058.90k   248158.55k   291601.75k   260262.57k   254536.36k

[email protected]:~/aes_ni_force# cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1       231167 iterations per second for 256-bit key
PBKDF2-sha256     222344 iterations per second for 256-bit key
PBKDF2-sha512     224054 iterations per second for 256-bit key
PBKDF2-ripemd160  195922 iterations per second for 256-bit key
PBKDF2-whirlpool  151879 iterations per second for 256-bit key
argon2i       4 iterations, 126612 memory, 4 parallel threads (CPUs) for 256-bit key (requested 2000 ms time)
argon2id      4 iterations, 143037 memory, 4 parallel threads (CPUs) for 256-bit key (requested 2000 ms time)
#     Algorithm | Key |  Encryption |  Decryption
        aes-cbc   128b   216.5 MiB/s   499.4 MiB/s
    serpent-cbc   128b    19.2 MiB/s    67.6 MiB/s
    twofish-cbc   128b    50.9 MiB/s    41.0 MiB/s
        aes-cbc   256b   162.5 MiB/s   511.7 MiB/s
    serpent-cbc   256b    30.8 MiB/s    99.1 MiB/s
    twofish-cbc   256b    38.5 MiB/s    52.9 MiB/s
        aes-xts   256b   347.2 MiB/s   368.6 MiB/s
    serpent-xts   256b    68.7 MiB/s   102.8 MiB/s
    twofish-xts   256b    54.6 MiB/s    59.8 MiB/s
        aes-xts   512b   357.4 MiB/s   374.6 MiB/s
    serpent-xts   512b   105.4 MiB/s    88.6 MiB/s
    twofish-xts   512b    30.6 MiB/s    41.7 MiB/s

To compile the kernel module, make a directory aes_ni_force and add the following files (all based on these instructions):

aes_ni_force.c

#include <linux/init.h>
#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/bitops.h>


MODULE_LICENSE("GPL");
MODULE_AUTHOR("David Hoppenbrouwers");
MODULE_DESCRIPTION("Force usage of AES-NI in kernel");
MODULE_VERSION("0.0.1");


static int __init lkm_example_init(void) {
    printk(KERN_INFO "Forcing AES-NI\n");
    set_bit(153, (unsigned long *)(boot_cpu_data.x86_capability));
    return 0;
}

static void __exit lkm_example_exit(void) {
    printk(KERN_INFO "Un-forcing AES-NI\n");
}


module_init(lkm_example_init);
module_exit(lkm_example_exit);

Makefile

obj-m += aes_ni_force.o


all:
    make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules

clean:
    make -C /lib/modules/$(shell uname -r)/build M=$(PWD) clean

Then run these commands:

$ apt install build-essential linux-headers-`uname -r`
$ make
$ insmod aes_ni_force.ko
$ modprobe aesni_intel

As for the magic constant in OPENSSL_ia32cap: I've derived it by checking how
CPUID works, reading the manpage and after finding a random StackOverflow
answer I came up with this:

extern unsigned int OPENSSL_ia32cap_P[];


void main() {
    printf("0: %x\n", OPENSSL_ia32cap_P[0]);
    printf("1: %x\n", OPENSSL_ia32cap_P[1]);
    printf("2: %x\n", OPENSSL_ia32cap_P[2]);
    printf("3: %x\n", OPENSSL_ia32cap_P[3]);
}

• Put the above in `main.c´
• Compile with gcc main.c -lcrypto -static
• Run with ./a.out

• Launch python3 (or whatever really) and type this:

  • Put the first number in a = 0x<value>
  • Put the second number in ´b = 0x`
  • Execute this: hex(a | (b << 32) | (1 << 57))
  • Pass the value you got to OPENSSL_ia32cap

• Run OPENSSL_ia32cap=<value> ./a.out and make sure the output is the
  same (aside from the (1 << 57) that got added). If it is not, then
  don't use the value, otherwise your day may get ruined.

If you want to set the env variable for any systemd services execute systemctl edit <service>
and add the following:

[Service]
Environment=OPENSSL_ia32cap=<value>

Demindiro

Also this CloudFlare Captcha bullshit does not work properly and is driving me nuts

thammy321

What is the average download/upload speed?