Intel MDS Mitigations Haswell Xeon

MDS / Zombie Load mitigation impact tests by Michael Larabel.

HTML result view exported from: https://openbenchmarking.org/result/1905237-HV-INTELMDS826&rdt&grs.

ProcessorMotherboardChipsetMemoryDiskGraphicsAudioMonitorNetworkOSKernelDesktopDisplay ServerDisplay DriverOpenGLCompilerFile-SystemScreen ResolutionE5-1680 v3 MDS Mitigated MDS VulnerableIntel Xeon E5-1680 v3 @ 3.80GHz (8 Cores / 16 Threads)ASUS X99-A (3902 BIOS)Intel Xeon E7 v3/Xeon16384MB60GB Patriot TorcheVGA NVIDIA NVE7 1GBRealtek ALC1150VE228Intel I218-VUbuntu 18.044.18.0-20-generic (x86_64)GNOME Shell 3.28.3X Server 1.20.1modesetting 1.20.14.3 Mesa 18.2.8GCC 7.4.0ext41920x1080OpenBenchmarking.orgCompiler Details- --build=x86_64-linux-gnu --disable-vtable-verify --disable-werror --enable-checking=release --enable-clocale=gnu --enable-default-pie --enable-gnu-unique-object --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --enable-libmpx --enable-libstdcxx-debug --enable-libstdcxx-time=yes --enable-multiarch --enable-multilib --enable-nls --enable-objc-gc=auto --enable-offload-targets=nvptx-none --enable-plugin --enable-shared --enable-threads=posix --host=x86_64-linux-gnu --program-prefix=x86_64-linux-gnu- --target=x86_64-linux-gnu --with-abi=m64 --with-arch-32=i686 --with-default-libstdcxx-abi=new --with-gcc-major-version-only --with-multilib-list=m32,m64,mx32 --with-target-system-zlib --with-tune=generic --without-cuda-driver -v Disk Details- CFQ / errors=remount-ro,relatime,rwProcessor Details- Scaling Governor: intel_pstate powersaveJava Details- OpenJDK Runtime Environment (build 11.0.3+7-Ubuntu-1ubuntu218.04.1)Python Details- Python 2.7.15rc1 + Python 3.6.7Security Details- E5-1680 v3: MDS Mitigated: KPTI + l1tf: Mitigation of PTE Inversion + mds: Mitigation of Clear buffers; SMT vulnerable + meltdown: Mitigation of PTI + spec_store_bypass: Mitigation of SSB disabled via prctl and seccomp + spectre_v1: Mitigation of __user pointer sanitization + spectre_v2: Mitigation of Full generic retpoline IBPB: conditional IBRS_FW STIBP: conditional RSB filling - E5-1680 v3: MDS Vulnerable: KPTI + l1tf: Mitigation of PTE Inversion + mds: Vulnerable; SMT vulnerable + meltdown: Mitigation of PTI + spec_store_bypass: Mitigation of SSB disabled via prctl and seccomp + spectre_v1: Mitigation of __user pointer sanitization + spectre_v2: Mitigation of Full generic retpoline IBPB: conditional IBRS_FW STIBP: conditional RSB filling

ctx-clock: Context Switch Timehackbench: 32 - Processstress-ng: System V Message Passingstress-ng: Context Switchingt-test1: 2stress-ng: Socket Activitysockperf: Throughputglibc-bench: pthread_onceglibc-bench: ffscompilebench: Initial Createglibc-bench: ffsllpostmark: Disk Transaction Performancegimp: resizeosbench: Create Threadsmcperf: Getstress-ng: Semaphoresgimp: rotategimp: unsharp-maskosbench: Launch Programsgimp: auto-levelspgbench: Buffer Test - Normal Load - Read Onlyosbench: Create Filesethr: TCP - Latency - 32ethr: TCP - Latency - 1build-llvm: Time To Compilebuild-linux-kernel: Time To Compileosbench: Memory Allocationsopenssl: RSA 4096-bit Performancemcperf: Setredis: SETpgbench: Buffer Test - Normal Load - Read Writebork: File Encryption Timesockperf: Latency Under Loadsockperf: Latency Ping PongE5-1680 v3 MDS Mitigated MDS Vulnerable1103122.807084539349341811.6150204239192.052.053352.31535711.9216.6996394342939226.0349.6431.2622.1215855415.3620.1420.0356696.9484.72127553033153708625489.0824.344.3954690.47929931944324949.7658884651041.881.883622.14576911.0815.60102920365285224.6047.0029.6821.0516585414.6919.2919.2755495.7183.67127454880161258625178.9222.644.15OpenBenchmarking.org

ctx_clock

Context Switch Time

OpenBenchmarking.orgClocks, Fewer Is Betterctx_clockContext Switch TimeMDS MitigatedMDS Vulnerable2004006008001000SE +/- 5.00, N = 31103546

Hackbench

Count: 32 - Type: Process

OpenBenchmarking.orgSeconds, Fewer Is BetterHackbenchCount: 32 - Type: ProcessMDS MitigatedMDS Vulnerable306090120150SE +/- 0.14, N = 3SE +/- 0.32, N = 3122.8090.471. (CC) gcc options: -lpthread

Stress-NG

Test: System V Message Passing

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: System V Message PassingMDS MitigatedMDS Vulnerable2M4M6M8M10MSE +/- 6619.31, N = 3SE +/- 6464.96, N = 3708453992993191. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Stress-NG

Test: Context Switching

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: Context SwitchingMDS MitigatedMDS Vulnerable900K1800K2700K3600K4500KSE +/- 44873.87, N = 3SE +/- 73577.73, N = 3349341844324941. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

t-test1

Threads: 2

OpenBenchmarking.orgSeconds, Fewer Is Bettert-test1 2017-01-13Threads: 2MDS MitigatedMDS Vulnerable3691215SE +/- 0.04, N = 3SE +/- 0.10, N = 311.619.761. (CC) gcc options: -pthread

Stress-NG

Test: Socket Activity

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: Socket ActivityMDS MitigatedMDS Vulnerable13002600390052006500SE +/- 65.25, N = 3SE +/- 43.72, N = 3502058881. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

Sockperf

Test: Throughput

OpenBenchmarking.orgMessages Per Second, More Is BetterSockperf 3.4Test: ThroughputMDS MitigatedMDS Vulnerable100K200K300K400K500KSE +/- 3479.11, N = 5SE +/- 5314.36, N = 254239194651041. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

glibc bench

Benchmark: pthread_once

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: pthread_onceMDS MitigatedMDS Vulnerable0.46130.92261.38391.84522.3065SE +/- 0.00, N = 3SE +/- 0.00, N = 32.051.88

glibc bench

Benchmark: ffs

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: ffsMDS MitigatedMDS Vulnerable0.46130.92261.38391.84522.3065SE +/- 0.00, N = 3SE +/- 0.00, N = 32.051.88

Compile Bench

Test: Initial Create

OpenBenchmarking.orgMB/s, More Is BetterCompile Bench 0.6Test: Initial CreateMDS MitigatedMDS Vulnerable80160240320400SE +/- 3.17, N = 3SE +/- 5.04, N = 15335362

glibc bench

Benchmark: ffsll

OpenBenchmarking.orgnanoseconds, Fewer Is Betterglibc bench 1.0Benchmark: ffsllMDS MitigatedMDS Vulnerable0.51981.03961.55942.07922.599SE +/- 0.00, N = 3SE +/- 0.00, N = 32.312.14

PostMark

Disk Transaction Performance

OpenBenchmarking.orgTPS, More Is BetterPostMark 1.51Disk Transaction PerformanceMDS MitigatedMDS Vulnerable12002400360048006000SE +/- 38.33, N = 3SE +/- 44.00, N = 3535757691. (CC) gcc options: -O3

GIMP

Test: resize

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: resizeMDS MitigatedMDS Vulnerable3691215SE +/- 0.11, N = 3SE +/- 0.14, N = 311.9211.08

OSBench

Test: Create Threads

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Create ThreadsMDS MitigatedMDS Vulnerable48121620SE +/- 0.12, N = 3SE +/- 0.17, N = 1516.6915.601. (CC) gcc options: -lm

Memcached mcperf

Method: Get

OpenBenchmarking.orgOperations Per Second, More Is BetterMemcached mcperf 1.5.10Method: GetMDS MitigatedMDS Vulnerable20K40K60K80K100KSE +/- 1055.98, N = 3SE +/- 812.32, N = 3963941029201. (CC) gcc options: -O2 -lm -rdynamic

Stress-NG

Test: Semaphores

OpenBenchmarking.orgBogo Ops/s, More Is BetterStress-NG 0.07.26Test: SemaphoresMDS MitigatedMDS Vulnerable800K1600K2400K3200K4000KSE +/- 12163.61, N = 3SE +/- 4609.44, N = 3342939236528521. (CC) gcc options: -O2 -std=gnu99 -lm -lcrypt -lrt -lpthread -lc

GIMP

Test: rotate

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: rotateMDS MitigatedMDS Vulnerable612182430SE +/- 0.14, N = 3SE +/- 0.10, N = 326.0324.60

GIMP

Test: unsharp-mask

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: unsharp-maskMDS MitigatedMDS Vulnerable1122334455SE +/- 0.19, N = 3SE +/- 0.14, N = 349.6447.00

OSBench

Test: Launch Programs

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Launch ProgramsMDS MitigatedMDS Vulnerable714212835SE +/- 0.04, N = 3SE +/- 0.13, N = 331.2629.681. (CC) gcc options: -lm

GIMP

Test: auto-levels

OpenBenchmarking.orgSeconds, Fewer Is BetterGIMP 2.8.22Test: auto-levelsMDS MitigatedMDS Vulnerable510152025SE +/- 0.19, N = 3SE +/- 0.09, N = 322.1221.05

PostgreSQL pgbench

Scaling: Buffer Test - Test: Normal Load - Mode: Read Only

OpenBenchmarking.orgTPS, More Is BetterPostgreSQL pgbench 10.3Scaling: Buffer Test - Test: Normal Load - Mode: Read OnlyMDS MitigatedMDS Vulnerable40K80K120K160K200KSE +/- 303.90, N = 3SE +/- 406.46, N = 31585541658541. (CC) gcc options: -fno-strict-aliasing -fwrapv -O2 -lpgcommon -lpgport -lpq -lpthread -lrt -lcrypt -ldl -lm

OSBench

Test: Create Files

OpenBenchmarking.orgus Per Event, Fewer Is BetterOSBenchTest: Create FilesMDS MitigatedMDS Vulnerable48121620SE +/- 0.04, N = 3SE +/- 0.09, N = 315.3614.691. (CC) gcc options: -lm

Ethr

Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 32

OpenBenchmarking.orgMicroseconds, Fewer Is BetterEthr 2019-01-02Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 32MDS MitigatedMDS Vulnerable510152025SE +/- 0.13, N = 3SE +/- 0.10, N = 320.1419.29MIN: 16.53 / MAX: 46.01MIN: 15.75 / MAX: 44.01

Ethr

Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 1

OpenBenchmarking.orgMicroseconds, Fewer Is BetterEthr 2019-01-02Server Address: localhost - Protocol: TCP - Test: Latency - Threads: 1MDS MitigatedMDS Vulnerable510152025SE +/- 0.27, N = 3SE +/- 0.03, N = 320.0319.27MIN: 16.17 / MAX: 46.57MIN: 15.76 / MAX: 43.62

Timed LLVM Compilation

Time To Compile

OpenBenchmarking.orgSeconds, Fewer Is BetterTimed LLVM Compilation 6.0.1Time To CompileMDS MitigatedMDS Vulnerable120240360480600566554

Timed Linux Kernel Compilation

Time To Compile

OpenBenchmarking.orgSeconds, Fewer Is BetterTimed Linux Kernel Compilation 4.18Time To CompileMDS MitigatedMDS Vulnerable20406080100SE +/- 1.15, N = 5SE +/- 1.47, N = 396.9495.71

OSBench

Test: Memory Allocations

OpenBenchmarking.orgNs Per Event, Fewer Is BetterOSBenchTest: Memory AllocationsMDS MitigatedMDS Vulnerable20406080100SE +/- 0.02, N = 3SE +/- 0.05, N = 384.7283.671. (CC) gcc options: -lm

OpenSSL

RSA 4096-bit Performance

OpenBenchmarking.orgSigns Per Second, More Is BetterOpenSSL 1.1.1RSA 4096-bit PerformanceMDS MitigatedMDS Vulnerable30060090012001500SE +/- 0.37, N = 3SE +/- 0.47, N = 3127512741. (CC) gcc options: -pthread -m64 -O3 -lssl -lcrypto -ldl

Memcached mcperf

Method: Set

OpenBenchmarking.orgOperations Per Second, More Is BetterMemcached mcperf 1.5.10Method: SetMDS MitigatedMDS Vulnerable12K24K36K48K60KSE +/- 1267.93, N = 15SE +/- 1162.80, N = 1553033548801. (CC) gcc options: -O2 -lm -rdynamic

Redis

Test: SET

OpenBenchmarking.orgRequests Per Second, More Is BetterRedis 4.0.8Test: SETMDS MitigatedMDS Vulnerable300K600K900K1200K1500KSE +/- 36088.19, N = 12SE +/- 21068.93, N = 3153708616125861. (CC) gcc options: -ggdb -rdynamic -lm -ldl -pthread

PostgreSQL pgbench

Scaling: Buffer Test - Test: Normal Load - Mode: Read Write

OpenBenchmarking.orgTPS, More Is BetterPostgreSQL pgbench 10.3Scaling: Buffer Test - Test: Normal Load - Mode: Read WriteMDS MitigatedMDS Vulnerable5001000150020002500SE +/- 38.64, N = 15SE +/- 50.29, N = 15254825171. (CC) gcc options: -fno-strict-aliasing -fwrapv -O2 -lpgcommon -lpgport -lpq -lpthread -lrt -lcrypt -ldl -lm

Bork File Encrypter

File Encryption Time

OpenBenchmarking.orgSeconds, Fewer Is BetterBork File Encrypter 1.4File Encryption TimeMDS MitigatedMDS Vulnerable3691215SE +/- 0.15, N = 15SE +/- 0.27, N = 159.088.92

Sockperf

Test: Latency Under Load

OpenBenchmarking.orgusec, Fewer Is BetterSockperf 3.4Test: Latency Under LoadMDS MitigatedMDS Vulnerable612182430SE +/- 0.87, N = 20SE +/- 1.13, N = 2024.3422.641. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Sockperf

Test: Latency Ping Pong

OpenBenchmarking.orgusec, Fewer Is BetterSockperf 3.4Test: Latency Ping PongMDS MitigatedMDS Vulnerable0.98781.97562.96343.95124.939SE +/- 0.06, N = 25SE +/- 0.03, N = 54.394.151. (CXX) g++ options: --param -O3 -rdynamic -ldl -lpthread

Phoronix Test Suite v10.8.5