Brocade Fabric OS Encryption Administrator’s Guide Supporting NetApp Lifetime Key Manager (LKM) and KeySecure Storage Secure Key Manager (SSKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 250)

232 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)
53-1002925-01
Measuring encryption performance
6
Measuring encryption performance
With the introduction of Fabric OS v7.1.0, you can monitor the throughput of redirected I/O flow
through an encryption engine (EE). In support of this functionality, the cryptocfg
--
perfshow
command is used.
The cryptocfg
--
perfshow command displays the throughput performance between the external
ports and the internal cryptographic processing modules, similar to the way that
-
portperfshow
displays throughput performance at the external port. Throughput is measured as Bytes/second.
For example:
FabricAdmin:switch> cryptocfg --perfshow [slot] [-rx | -tx | -tx -rx]
[-interval ]
Whereby:
• Slot displays the throughput of redirected I/O flow through the EE in a given slot of the
chassis.
•
-
tx displays the transmit throughput of the redirected I/O.
•
-
rx displays the receive throughput of the redirected I/O.
•
-
tx
-
rx displays the transmit and receive throughputs of the redirected I/O.
• Interval represents a numeric value (in seconds) between refreshes.
NOTE:
• The port number mentioned in the output is the user port where virtual entities (virtual
initiators and virtual targets) are hosted.
• For accurate results, ensure that the encryption engines (EEs) are online before executing the
command. If an EE is offline, throughput results will be shown as 0.
• Even though virtual entities are hosted in a single port of encryption FPGA, I/Os for those
entities will be sprayed across the ports that belong to the same port group of the hosted port.
Each port group belonging to the encryption ASIC consists of 4 ports.
• To determine the throughput from or to a single host or target pair, the I/O from or to all other
host or target pairs should be quiesced. This is similar to measuring throughput of a single
device connected behind an NPIV port.
Example Output to determine the throughput from or to a single host or target pair:
1. Determine the user port index on which the virtual entity is hosted.
a. Get the PWWN of the virtual entity (virtual target/virtual Initiator) for which the
performance needs to be monitored by executing the cryptocfg
–- show –con
<container name>
-
stat command.
FabricAdmin:switch> cryptocfg --show -con tape1 -stat
Container name: tape1
Type: tape
EE node: 10:00:00:05:1e:55:4d:5e
EE slot: 0
EE hosting container: current
Target: 50:01:10:a0:00:8d:f6:8a 50:01:10:a0:00:8d:f6:89
Target PID: 690a00
VT: 20:00:00:05:1e:55:4d:61 20:01:00:05:1e:55:4d:61
VT PID: 012001