Intel MDS Mitigations Haswell Xeon

MDS / Zombie Load mitigation impact tests by Michael Larabel.

HTML result view exported from: https://openbenchmarking.org/result/1905237-HV-INTELMDS826&grt&sor.

ProcessorMotherboardChipsetMemoryDiskGraphicsAudioMonitorNetworkOSKernelDesktopDisplay ServerDisplay DriverOpenGLCompilerFile-SystemScreen ResolutionE5-1680 v3 MDS Mitigated MDS VulnerableIntel Xeon E5-1680 v3 @ 3.80GHz (8 Cores / 16 Threads)ASUS X99-A (3902 BIOS)Intel Xeon E7 v3/Xeon16384MB60GB Patriot TorcheVGA NVIDIA NVE7 1GBRealtek ALC1150VE228Intel I218-VUbuntu 18.044.18.0-20-generic (x86_64)GNOME Shell 3.28.3X Server 1.20.1modesetting 1.20.14.3 Mesa 18.2.8GCC 7.4.0ext41920x1080OpenBenchmarking.orgCompiler Details- --build=x86_64-linux-gnu --disable-vtable-verify --disable-werror --enable-checking=release --enable-clocale=gnu --enable-default-pie --enable-gnu-unique-object --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --enable-libmpx --enable-libstdcxx-debug --enable-libstdcxx-time=yes --enable-multiarch --enable-multilib --enable-nls --enable-objc-gc=auto --enable-offload-targets=nvptx-none --enable-plugin --enable-shared --enable-threads=posix --host=x86_64-linux-gnu --program-prefix=x86_64-linux-gnu- --target=x86_64-linux-gnu --with-abi=m64 --with-arch-32=i686 --with-default-libstdcxx-abi=new --with-gcc-major-version-only --with-multilib-list=m32,m64,mx32 --with-target-system-zlib --with-tune=generic --without-cuda-driver -v Disk Details- CFQ / errors=remount-ro,relatime,rwProcessor Details- Scaling Governor: intel_pstate powersaveJava Details- OpenJDK Runtime Environment (build 11.0.3+7-Ubuntu-1ubuntu218.04.1)Python Details- Python 2.7.15rc1 + Python 3.6.7Security Details- E5-1680 v3: MDS Mitigated: KPTI + l1tf: Mitigation of PTE Inversion + mds: Mitigation of Clear buffers; SMT vulnerable + meltdown: Mitigation of PTI + spec_store_bypass: Mitigation of SSB disabled via prctl and seccomp + spectre_v1: Mitigation of __user pointer sanitization + spectre_v2: Mitigation of Full generic retpoline IBPB: conditional IBRS_FW STIBP: conditional RSB filling - E5-1680 v3: MDS Vulnerable: KPTI + l1tf: Mitigation of PTE Inversion + mds: Vulnerable; SMT vulnerable + meltdown: Mitigation of PTI + spec_store_bypass: Mitigation of SSB disabled via prctl and seccomp + spectre_v1: Mitigation of __user pointer sanitization + spectre_v2: Mitigation of Full generic retpoline IBPB: conditional IBRS_FW STIBP: conditional RSB filling

bork: File Encryption Timecompilebench: Initial Createctx-clock: Context Switch Timeethr: TCP - Latency - 1ethr: TCP - Latency - 32gimp: resizegimp: rotategimp: auto-levelsgimp: unsharp-maskglibc-bench: ffsglibc-bench: ffsllglibc-bench: pthread_oncehackbench: 32 - Processmcperf: Getmcperf: Setopenssl: RSA 4096-bit Performanceosbench: Create Filesosbench: Create Threadsosbench: Launch Programsosbench: Memory Allocationspgbench: Buffer Test - Normal Load - Read Onlypgbench: Buffer Test - Normal Load - Read Writepostmark: Disk Transaction Performanceredis: SETsockperf: Throughputsockperf: Latency Ping Pongsockperf: Latency Under Loadstress-ng: Semaphoresstress-ng: Socket Activitystress-ng: Context Switchingstress-ng: System V Message Passingt-test1: 2build-linux-kernel: Time To Compilebuild-llvm: Time To CompileE5-1680 v3 MDS Mitigated MDS Vulnerable9.08335110320.0320.1411.9226.0322.1249.642.052.312.05122.809639453033127515.3616.6931.2684.721585542548535715370864239194.3924.34342939250203493418708453911.6196.945668.9236254619.2719.2911.0824.6021.0547.001.882.141.8890.4710292054880127414.6915.6029.6883.671658542517576916125864651044.1522.6436528525888443249492993199.7695.71554OpenBenchmarking.org

Bork File Encrypter

File Encryption Time

OpenBenchmarking.orgSeconds, Fewer Is BetterBork File Encrypter 1.4File Encryption TimeMDS VulnerableMDS Mitigated3691215SE +/- 0.27, N = 15SE +/- 0.15, N = 158.929.08

Compile Bench

Test: Initial Create

OpenBenchmarking.orgMB/s, More Is BetterCompile Bench 0.6Test: Initial CreateMDS VulnerableMDS Mitigated80160240320400SE +/- 5.04, N = 15SE +/- 3.17, N = 3362335

ctx_clock

Context Switch Time

OpenBenchmarking.orgClocks, Fewer Is Betterctx_clockContext Switch TimeMDS VulnerableMDS Mitigated2004006008001000SE +/- 5.00, N = 35461103

Ethr

Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 1

OpenBenchmarking.orgMicroseconds, Fewer Is BetterEthr 2019-01-02Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 1MDS VulnerableMDS Mitigated510152025SE +/- 0.03, N = 3SE +/- 0.27, N = 319.2720.03MIN: 15.76 / MAX: 43.62MIN: 16.17 / MAX: 46.57

Ethr

Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 32

OpenBenchmarking.orgMicroseconds, Fewer Is BetterEthr 2019-01-02Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 32MDS VulnerableMDS Mitigated510152025SE +/- 0.10, N = 3SE +/- 0.13, N = 319.2920.14MIN: 15.75 / MAX: 44.01MIN: 16.53 / MAX: 46.01

GIMP

Test: resize

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: resizeMDS VulnerableMDS Mitigated3691215SE +/- 0.14, N = 3SE +/- 0.11, N = 311.0811.92

GIMP

Test: rotate

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: rotateMDS VulnerableMDS Mitigated612182430SE +/- 0.10, N = 3SE +/- 0.14, N = 324.6026.03

GIMP

Test: auto-levels

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: auto-levelsMDS VulnerableMDS Mitigated510152025SE +/- 0.09, N = 3SE +/- 0.19, N = 321.0522.12

GIMP

Test: unsharp-mask

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: unsharp-maskMDS VulnerableMDS Mitigated1122334455SE +/- 0.14, N = 3SE +/- 0.19, N = 347.0049.64

glibc bench

Benchmark: ffs

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: ffsMDS VulnerableMDS Mitigated0.46130.92261.38391.84522.3065SE +/- 0.00, N = 3SE +/- 0.00, N = 31.882.05

glibc bench

Benchmark: ffsll

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: ffsllMDS VulnerableMDS Mitigated0.51981.03961.55942.07922.599SE +/- 0.00, N = 3SE +/- 0.00, N = 32.142.31

glibc bench

Benchmark: pthread_once

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: pthread_onceMDS VulnerableMDS Mitigated0.46130.92261.38391.84522.3065SE +/- 0.00, N = 3SE +/- 0.00, N = 31.882.05

Hackbench

Count: 32 - Type: Process

OpenBenchmarking.orgSeconds, Fewer Is BetterHackbenchCount: 32 - Type: ProcessMDS VulnerableMDS Mitigated306090120150SE +/- 0.32, N = 3SE +/- 0.14, N = 390.47122.801. (CC) gcc options: -lpthread

Memcached mcperf

Method: Get

OpenBenchmarking.orgOperations Per Second, More Is BetterMemcached mcperf 1.5.10Method: GetMDS VulnerableMDS Mitigated20K40K60K80K100KSE +/- 812.32, N = 3SE +/- 1055.98, N = 3102920963941. (CC) gcc options: -O2 -lm -rdynamic

Memcached mcperf

Method: Set

OpenBenchmarking.orgOperations Per Second, More Is BetterMemcached mcperf 1.5.10Method: SetMDS VulnerableMDS Mitigated12K24K36K48K60KSE +/- 1162.80, N = 15SE +/- 1267.93, N = 1554880530331. (CC) gcc options: -O2 -lm -rdynamic

OpenSSL

RSA 4096-bit Performance

OpenBenchmarking.orgSigns Per Second, More Is BetterOpenSSL 1.1.1RSA 4096-bit PerformanceMDS MitigatedMDS Vulnerable30060090012001500SE +/- 0.37, N = 3SE +/- 0.47, N = 3127512741. (CC) gcc options: -pthread -m64 -O3 -lssl -lcrypto -ldl

OSBench

Test: Create Files

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Create FilesMDS VulnerableMDS Mitigated48121620SE +/- 0.09, N = 3SE +/- 0.04, N = 314.6915.361. (CC) gcc options: -lm

OSBench

Test: Create Threads

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Create ThreadsMDS VulnerableMDS Mitigated48121620SE +/- 0.17, N = 15SE +/- 0.12, N = 315.6016.691. (CC) gcc options: -lm

OSBench

Test: Launch Programs

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Launch ProgramsMDS VulnerableMDS Mitigated714212835SE +/- 0.13, N = 3SE +/- 0.04, N = 329.6831.261. (CC) gcc options: -lm

OSBench

Test: Memory Allocations

OpenBenchmarking.orgNs Per Event, Fewer Is BetterOSBenchTest: Memory AllocationsMDS VulnerableMDS Mitigated20406080100SE +/- 0.05, N = 3SE +/- 0.02, N = 383.6784.721. (CC) gcc options: -lm

PostgreSQL pgbench

Scaling: Buffer Test - Test: Normal Load - Mode: Read Only

OpenBenchmarking.orgTPS, More Is BetterPostgreSQL pgbench 10.3Scaling: Buffer Test - Test: Normal Load - Mode: Read OnlyMDS VulnerableMDS Mitigated40K80K120K160K200KSE +/- 406.46, N = 3SE +/- 303.90, N = 31658541585541. (CC) gcc options: -fno-strict-aliasing -fwrapv -O2 -lpgcommon -lpgport -lpq -lpthread -lrt -lcrypt -ldl -lm

PostgreSQL pgbench

Scaling: Buffer Test - Test: Normal Load - Mode: Read Write

OpenBenchmarking.orgTPS, More Is BetterPostgreSQL pgbench 10.3Scaling: Buffer Test - Test: Normal Load - Mode: Read WriteMDS MitigatedMDS Vulnerable5001000150020002500SE +/- 38.64, N = 15SE +/- 50.29, N = 15254825171. (CC) gcc options: -fno-strict-aliasing -fwrapv -O2 -lpgcommon -lpgport -lpq -lpthread -lrt -lcrypt -ldl -lm

PostMark

Disk Transaction Performance

OpenBenchmarking.orgTPS, More Is BetterPostMark 1.51Disk Transaction PerformanceMDS VulnerableMDS Mitigated12002400360048006000SE +/- 44.00, N = 3SE +/- 38.33, N = 3576953571. (CC) gcc options: -O3

Redis

Test: SET

OpenBenchmarking.orgRequests Per Second, More Is BetterRedis 4.0.8Test: SETMDS VulnerableMDS Mitigated300K600K900K1200K1500KSE +/- 21068.93, N = 3SE +/- 36088.19, N = 12161258615370861. (CC) gcc options: -ggdb -rdynamic -lm -ldl -pthread

Sockperf

Test: Throughput

OpenBenchmarking.orgMessages Per Second, More Is BetterSockperf 3.4Test: ThroughputMDS VulnerableMDS Mitigated100K200K300K400K500KSE +/- 5314.36, N = 25SE +/- 3479.11, N = 54651044239191. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Sockperf

Test: Latency Ping Pong

OpenBenchmarking.orgusec, Fewer Is BetterSockperf 3.4Test: Latency Ping PongMDS VulnerableMDS Mitigated0.98781.97562.96343.95124.939SE +/- 0.03, N = 5SE +/- 0.06, N = 254.154.391. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Sockperf

Test: Latency Under Load

OpenBenchmarking.orgusec, Fewer Is BetterSockperf 3.4Test: Latency Under LoadMDS VulnerableMDS Mitigated612182430SE +/- 1.13, N = 20SE +/- 0.87, N = 2022.6424.341. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Stress-NG

Test: Semaphores

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: SemaphoresMDS VulnerableMDS Mitigated800K1600K2400K3200K4000KSE +/- 4609.44, N = 3SE +/- 12163.61, N = 3365285234293921. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Stress-NG

Test: Socket Activity

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: Socket ActivityMDS VulnerableMDS Mitigated13002600390052006500SE +/- 43.72, N = 3SE +/- 65.25, N = 3588850201. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Stress-NG

Test: Context Switching

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: Context SwitchingMDS VulnerableMDS Mitigated900K1800K2700K3600K4500KSE +/- 73577.73, N = 3SE +/- 44873.87, N = 3443249434934181. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Stress-NG

Test: System V Message Passing

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: System V Message PassingMDS VulnerableMDS Mitigated2M4M6M8M10MSE +/- 6464.96, N = 3SE +/- 6619.31, N = 3929931970845391. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

t-test1

Threads: 2

OpenBenchmarking.orgSeconds, Fewer Is Bettert-test1 2017-01-13Threads: 2MDS VulnerableMDS Mitigated3691215SE +/- 0.10, N = 3SE +/- 0.04, N = 39.7611.611. (CC) gcc options: -pthread

Timed Linux Kernel Compilation

Time To Compile

OpenBenchmarking.orgSeconds, Fewer Is BetterTimed Linux Kernel Compilation 4.18Time To CompileMDS VulnerableMDS Mitigated20406080100SE +/- 1.47, N = 3SE +/- 1.15, N = 595.7196.94

Timed LLVM Compilation

Time To Compile

OpenBenchmarking.orgSeconds, Fewer Is BetterTimed LLVM Compilation 6.0.1Time To CompileMDS VulnerableMDS Mitigated120240360480600554566

Phoronix Test Suite v10.8.5