Intel MDS Mitigations Haswell Xeon

MDS / Zombie Load mitigation impact tests by Michael Larabel.

HTML result view exported from: https://openbenchmarking.org/result/1905237-HV-INTELMDS826&grs&sor.

ProcessorMotherboardChipsetMemoryDiskGraphicsAudioMonitorNetworkOSKernelDesktopDisplay ServerDisplay DriverOpenGLCompilerFile-SystemScreen ResolutionE5-1680 v3 MDS Mitigated MDS VulnerableIntel Xeon E5-1680 v3 @ 3.80GHz (8 Cores / 16 Threads)ASUS X99-A (3902 BIOS)Intel Xeon E7 v3/Xeon16384MB60GB Patriot TorcheVGA NVIDIA NVE7 1GBRealtek ALC1150VE228Intel I218-VUbuntu 18.044.18.0-20-generic (x86_64)GNOME Shell 3.28.3X Server 1.20.1modesetting 1.20.14.3 Mesa 18.2.8GCC 7.4.0ext41920x1080OpenBenchmarking.orgCompiler Details- --build=x86_64-linux-gnu --disable-vtable-verify --disable-werror --enable-checking=release --enable-clocale=gnu --enable-default-pie --enable-gnu-unique-object --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --enable-libmpx --enable-libstdcxx-debug --enable-libstdcxx-time=yes --enable-multiarch --enable-multilib --enable-nls --enable-objc-gc=auto --enable-offload-targets=nvptx-none --enable-plugin --enable-shared --enable-threads=posix --host=x86_64-linux-gnu --program-prefix=x86_64-linux-gnu- --target=x86_64-linux-gnu --with-abi=m64 --with-arch-32=i686 --with-default-libstdcxx-abi=new --with-gcc-major-version-only --with-multilib-list=m32,m64,mx32 --with-target-system-zlib --with-tune=generic --without-cuda-driver -v Disk Details- CFQ / errors=remount-ro,relatime,rwProcessor Details- Scaling Governor: intel_pstate powersaveJava Details- OpenJDK Runtime Environment (build 11.0.3+7-Ubuntu-1ubuntu218.04.1)Python Details- Python 2.7.15rc1 + Python 3.6.7Security Details- E5-1680 v3: MDS Mitigated: KPTI + l1tf: Mitigation of PTE Inversion + mds: Mitigation of Clear buffers; SMT vulnerable + meltdown: Mitigation of PTI + spec_store_bypass: Mitigation of SSB disabled via prctl and seccomp + spectre_v1: Mitigation of __user pointer sanitization + spectre_v2: Mitigation of Full generic retpoline IBPB: conditional IBRS_FW STIBP: conditional RSB filling - E5-1680 v3: MDS Vulnerable: KPTI + l1tf: Mitigation of PTE Inversion + mds: Vulnerable; SMT vulnerable + meltdown: Mitigation of PTI + spec_store_bypass: Mitigation of SSB disabled via prctl and seccomp + spectre_v1: Mitigation of __user pointer sanitization + spectre_v2: Mitigation of Full generic retpoline IBPB: conditional IBRS_FW STIBP: conditional RSB filling

ctx-clock: Context Switch Timehackbench: 32 - Processstress-ng: System V Message Passingstress-ng: Context Switchingt-test1: 2stress-ng: Socket Activitysockperf: Throughputglibc-bench: pthread_onceglibc-bench: ffscompilebench: Initial Createglibc-bench: ffsllpostmark: Disk Transaction Performancegimp: resizeosbench: Create Threadsmcperf: Getstress-ng: Semaphoresgimp: rotategimp: unsharp-maskosbench: Launch Programsgimp: auto-levelspgbench: Buffer Test - Normal Load - Read Onlyosbench: Create Filesethr: TCP - Latency - 32ethr: TCP - Latency - 1build-llvm: Time To Compilebuild-linux-kernel: Time To Compileosbench: Memory Allocationsopenssl: RSA 4096-bit Performancemcperf: Setredis: SETpgbench: Buffer Test - Normal Load - Read Writebork: File Encryption Timesockperf: Latency Under Loadsockperf: Latency Ping PongE5-1680 v3 MDS Mitigated MDS Vulnerable1103122.807084539349341811.6150204239192.052.053352.31535711.9216.6996394342939226.0349.6431.2622.1215855415.3620.1420.0356696.9484.72127553033153708625489.0824.344.3954690.47929931944324949.7658884651041.881.883622.14576911.0815.60102920365285224.6047.0029.6821.0516585414.6919.2919.2755495.7183.67127454880161258625178.9222.644.15OpenBenchmarking.org

ctx_clock

Context Switch Time

OpenBenchmarking.orgClocks, Fewer Is Betterctx_clockContext Switch TimeMDS VulnerableMDS Mitigated2004006008001000SE +/- 5.00, N = 35461103

Hackbench

Count: 32 - Type: Process

OpenBenchmarking.orgSeconds, Fewer Is BetterHackbenchCount: 32 - Type: ProcessMDS VulnerableMDS Mitigated306090120150SE +/- 0.32, N = 3SE +/- 0.14, N = 390.47122.801. (CC) gcc options: -lpthread

Stress-NG

Test: System V Message Passing

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: System V Message PassingMDS VulnerableMDS Mitigated2M4M6M8M10MSE +/- 6464.96, N = 3SE +/- 6619.31, N = 3929931970845391. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Stress-NG

Test: Context Switching

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: Context SwitchingMDS VulnerableMDS Mitigated900K1800K2700K3600K4500KSE +/- 73577.73, N = 3SE +/- 44873.87, N = 3443249434934181. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

t-test1

Threads: 2

OpenBenchmarking.orgSeconds, Fewer Is Bettert-test1 2017-01-13Threads: 2MDS VulnerableMDS Mitigated3691215SE +/- 0.10, N = 3SE +/- 0.04, N = 39.7611.611. (CC) gcc options: -pthread

Stress-NG

Test: Socket Activity

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: Socket ActivityMDS VulnerableMDS Mitigated13002600390052006500SE +/- 43.72, N = 3SE +/- 65.25, N = 3588850201. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Sockperf

Test: Throughput

OpenBenchmarking.orgMessages Per Second, More Is BetterSockperf 3.4Test: ThroughputMDS VulnerableMDS Mitigated100K200K300K400K500KSE +/- 5314.36, N = 25SE +/- 3479.11, N = 54651044239191. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

glibc bench

Benchmark: pthread_once

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: pthread_onceMDS VulnerableMDS Mitigated0.46130.92261.38391.84522.3065SE +/- 0.00, N = 3SE +/- 0.00, N = 31.882.05

glibc bench

Benchmark: ffs

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: ffsMDS VulnerableMDS Mitigated0.46130.92261.38391.84522.3065SE +/- 0.00, N = 3SE +/- 0.00, N = 31.882.05

Compile Bench

Test: Initial Create

OpenBenchmarking.orgMB/s, More Is BetterCompile Bench 0.6Test: Initial CreateMDS VulnerableMDS Mitigated80160240320400SE +/- 5.04, N = 15SE +/- 3.17, N = 3362335

glibc bench

Benchmark: ffsll

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: ffsllMDS VulnerableMDS Mitigated0.51981.03961.55942.07922.599SE +/- 0.00, N = 3SE +/- 0.00, N = 32.142.31

PostMark

Disk Transaction Performance

OpenBenchmarking.orgTPS, More Is BetterPostMark 1.51Disk Transaction PerformanceMDS VulnerableMDS Mitigated12002400360048006000SE +/- 44.00, N = 3SE +/- 38.33, N = 3576953571. (CC) gcc options: -O3

GIMP

Test: resize

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: resizeMDS VulnerableMDS Mitigated3691215SE +/- 0.14, N = 3SE +/- 0.11, N = 311.0811.92

OSBench

Test: Create Threads

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Create ThreadsMDS VulnerableMDS Mitigated48121620SE +/- 0.17, N = 15SE +/- 0.12, N = 315.6016.691. (CC) gcc options: -lm

Memcached mcperf

Method: Get

OpenBenchmarking.orgOperations Per Second, More Is BetterMemcached mcperf 1.5.10Method: GetMDS VulnerableMDS Mitigated20K40K60K80K100KSE +/- 812.32, N = 3SE +/- 1055.98, N = 3102920963941. (CC) gcc options: -O2 -lm -rdynamic

Stress-NG

Test: Semaphores

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: SemaphoresMDS VulnerableMDS Mitigated800K1600K2400K3200K4000KSE +/- 4609.44, N = 3SE +/- 12163.61, N = 3365285234293921. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

GIMP

Test: rotate

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: rotateMDS VulnerableMDS Mitigated612182430SE +/- 0.10, N = 3SE +/- 0.14, N = 324.6026.03

GIMP

Test: unsharp-mask

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: unsharp-maskMDS VulnerableMDS Mitigated1122334455SE +/- 0.14, N = 3SE +/- 0.19, N = 347.0049.64

OSBench

Test: Launch Programs

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Launch ProgramsMDS VulnerableMDS Mitigated714212835SE +/- 0.13, N = 3SE +/- 0.04, N = 329.6831.261. (CC) gcc options: -lm

GIMP

Test: auto-levels

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: auto-levelsMDS VulnerableMDS Mitigated510152025SE +/- 0.09, N = 3SE +/- 0.19, N = 321.0522.12

PostgreSQL pgbench

Scaling: Buffer Test - Test: Normal Load - Mode: Read Only

OpenBenchmarking.orgTPS, More Is BetterPostgreSQL pgbench 10.3Scaling: Buffer Test - Test: Normal Load - Mode: Read OnlyMDS VulnerableMDS Mitigated40K80K120K160K200KSE +/- 406.46, N = 3SE +/- 303.90, N = 31658541585541. (CC) gcc options: -fno-strict-aliasing -fwrapv -O2 -lpgcommon -lpgport -lpq -lpthread -lrt -lcrypt -ldl -lm

OSBench

Test: Create Files

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Create FilesMDS VulnerableMDS Mitigated48121620SE +/- 0.09, N = 3SE +/- 0.04, N = 314.6915.361. (CC) gcc options: -lm

Ethr

Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 32

OpenBenchmarking.orgMicroseconds, Fewer Is BetterEthr 2019-01-02Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 32MDS VulnerableMDS Mitigated510152025SE +/- 0.10, N = 3SE +/- 0.13, N = 319.2920.14MIN: 15.75 / MAX: 44.01MIN: 16.53 / MAX: 46.01

Ethr

Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 1

OpenBenchmarking.orgMicroseconds, Fewer Is BetterEthr 2019-01-02Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 1MDS VulnerableMDS Mitigated510152025SE +/- 0.03, N = 3SE +/- 0.27, N = 319.2720.03MIN: 15.76 / MAX: 43.62MIN: 16.17 / MAX: 46.57

Timed LLVM Compilation

Time To Compile

OpenBenchmarking.orgSeconds, Fewer Is BetterTimed LLVM Compilation 6.0.1Time To CompileMDS VulnerableMDS Mitigated120240360480600554566

Timed Linux Kernel Compilation

Time To Compile

OpenBenchmarking.orgSeconds, Fewer Is BetterTimed Linux Kernel Compilation 4.18Time To CompileMDS VulnerableMDS Mitigated20406080100SE +/- 1.47, N = 3SE +/- 1.15, N = 595.7196.94

OSBench

Test: Memory Allocations

OpenBenchmarking.orgNs Per Event, Fewer Is BetterOSBenchTest: Memory AllocationsMDS VulnerableMDS Mitigated20406080100SE +/- 0.05, N = 3SE +/- 0.02, N = 383.6784.721. (CC) gcc options: -lm

OpenSSL

RSA 4096-bit Performance

OpenBenchmarking.orgSigns Per Second, More Is BetterOpenSSL 1.1.1RSA 4096-bit PerformanceMDS MitigatedMDS Vulnerable30060090012001500SE +/- 0.37, N = 3SE +/- 0.47, N = 3127512741. (CC) gcc options: -pthread -m64 -O3 -lssl -lcrypto -ldl

Memcached mcperf

Method: Set

OpenBenchmarking.orgOperations Per Second, More Is BetterMemcached mcperf 1.5.10Method: SetMDS VulnerableMDS Mitigated12K24K36K48K60KSE +/- 1162.80, N = 15SE +/- 1267.93, N = 1554880530331. (CC) gcc options: -O2 -lm -rdynamic

Redis

Test: SET

OpenBenchmarking.orgRequests Per Second, More Is BetterRedis 4.0.8Test: SETMDS VulnerableMDS Mitigated300K600K900K1200K1500KSE +/- 21068.93, N = 3SE +/- 36088.19, N = 12161258615370861. (CC) gcc options: -ggdb -rdynamic -lm -ldl -pthread

PostgreSQL pgbench

Scaling: Buffer Test - Test: Normal Load - Mode: Read Write

OpenBenchmarking.orgTPS, More Is BetterPostgreSQL pgbench 10.3Scaling: Buffer Test - Test: Normal Load - Mode: Read WriteMDS MitigatedMDS Vulnerable5001000150020002500SE +/- 38.64, N = 15SE +/- 50.29, N = 15254825171. (CC) gcc options: -fno-strict-aliasing -fwrapv -O2 -lpgcommon -lpgport -lpq -lpthread -lrt -lcrypt -ldl -lm

Bork File Encrypter

File Encryption Time

OpenBenchmarking.orgSeconds, Fewer Is BetterBork File Encrypter 1.4File Encryption TimeMDS VulnerableMDS Mitigated3691215SE +/- 0.27, N = 15SE +/- 0.15, N = 158.929.08

Sockperf

Test: Latency Under Load

OpenBenchmarking.orgusec, Fewer Is BetterSockperf 3.4Test: Latency Under LoadMDS VulnerableMDS Mitigated612182430SE +/- 1.13, N = 20SE +/- 0.87, N = 2022.6424.341. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Sockperf

Test: Latency Ping Pong

OpenBenchmarking.orgusec, Fewer Is BetterSockperf 3.4Test: Latency Ping PongMDS VulnerableMDS Mitigated0.98781.97562.96343.95124.939SE +/- 0.03, N = 5SE +/- 0.06, N = 254.154.391. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Phoronix Test Suite v10.8.5