This was known. https://lwn.net/Articles/765837/ reports 21% performance impact and the plan was to handle STIBP as an opt-in security feature. I am not sure why that was not furthered in the patches that have actually been committed to Linux, as I did not follow them closely.
Apparently the way to turn this and other mitigations off is the following mouthful: pti=off spectre_v2=off l1tf=off nospec_store_bypass_disable no_stf_barrier Would it make sense to have a single flag to "run insecure but fast" that we can use on pure development machines, test servers and the like? My Intel development server only runs code I choose.
Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
31–40 of 114 posts
Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#32No mention of the fact that AMD seem unaffected?
Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#33Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#341.3-1.4x slowdown is a lot more than I expected (I know it's for synthetic benchmarks but still...) Can someone explain (or link to an article) how a tweak to HT branch prediction heuristic can have such a huge impact on performance?
The problem is in the mitigations necessary to make it impossible/more difficult to exploit these side channel attacks. And that is costly because memory and needs to be moved around constantly. So that adds a ton of extra overhead whenever a context switch is made.
Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#35Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#36Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#37I don't like how these Scepter mitigations are being rolled out with no cost/benefit analysis. On a client machine, I'd rather just disable Javascript than pay a 30-50% performance penalty for mitigating these vulnerabilities.
Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#38I don't like how these Scepter mitigations are being rolled out with no cost/benefit analysis. On a client machine, I'd rather just disable Javascript than pay a 30-50% performance penalty for mitigating these vulnerabilities.
Running other peoples code (on other peoples machines) is a cloud thing, but they have an iron grip on the kernel and other software.
Re: Bisected: The Unfortunate Reason Linux 4.20 Is Running Slower
#39I don't like how these Scepter mitigations are being rolled out with no cost/benefit analysis. On a client machine, I'd rather just disable Javascript than pay a 30-50% performance penalty for mitigating these vulnerabilities.
Instead, everyone has to pay the performance tax proactively, regardless of their individual threat model. That is not how this sort of thing should be handled.