跳转到主内容

启用SMB 3加密会降低CIFS性能

Views:
3
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
perf<a>加密</a><a>性能</a><a>CIFS</a><a>SMB 3.0</a><a>SMB 3.1.1</a>
Last Updated:

适用场景

  • ONTAP 9
  • SMB 3
  • SMB签名和/或SMB加密
  • FAS 2500 系列

问题描述

  • 启用SMB 3加密后、观察到CIFS会话的吞吐量降低或延迟增加
  • SMB签名已启用、此时将显示以下消息:
Node: FAS2554-01 Time: Tue, May 03 20:44:54 2022 -0400 Severity: ALERT Message: Nblade.cifsNonAesNiBytesProc: Excessive SMB3 cryptographic processing load (AES-NI instruction set is not supported). Description: This message occurs when a system with CPUs that do not support the AES-NI instruction set is performing SMB3 encryption or signing of a large amount of data. These cryptographic operations can degrade performance severely for both SMB and other system operations. Corrective Action: Avoid encrypted or signed SMB3 traffic on systems that do not support the AES-NI instruction set. Source: SMBOffloadPool_00 Sequence#: 1065458

 

Scan to view the article on your device
CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support