[Samba] After configured server signing, file transfer speed is very slow

[Andrew Bartlett]

Try re-compiling with:

--accel-aes=intelaesni

Later Samba versions will give better improvements, for example the
upcoming Samba 4.12 has improments as detailed here:

https://blog.cryptomilk.org/2019/10/02/samba-and-gnutls/

Finally, see 
https://blogs.technet.microsoft.com/josebda/2010/12/01/the-basics-of-smb-signing-covering-both-smb1-and-smb2/
for some background.

Andrew Bartlett

On Wed, 2019-10-30 at 12:29 +0530, VigneshDhanraj G wrote:
> Hi, 
> 
> Thanks for your reply. 
> 
> I am not using hardware assist for the crypto. Is any workaround need to do for increasing speed after configured signing as mandatory? 
> want to configure signing as mandatory without reducing speed. Whether  need to change any configuration in smb.conf to overcome speed issue?
> Interest to know why there is performance degraded when I am using server signing as mandatory.  
> 
> Please find the below details:
> Samba version : 4.9.3
> processor : Intel(R) Atom(TM)
> Client : Windows7-10
> 
> Thanks,
> Vignesh.
> 
> 
> On Tue, Oct 29, 2019 at 10:35 PM Jeremy Allison <jra at samba.org> wrote:
> > On Tue, Oct 29, 2019 at 04:46:21PM +0530, VigneshDhanraj G via samba wrote:
> > > Hi team,
> > > 
> > > I want to configure server signing as mandatory without reducing speed, but
> > > you have mentioned that remove the server signing.
> > > Can you please explain why 90% speed is reducing after configured server
> > > signing as mandatory?
> > 
> > Completely depends on your platform and OS. Are you using hardware
> > assist for the crypto ? Samba can do so on modern Intel processors
> > with native AES instructions.
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba