Materiel/DL145-1
Aller à la navigation
Aller à la recherche
Caractéristiques
In a NutShell
- Machine: HP DL 345 G2
- CPU: 2xAMD opteron 246 (Single Core 2Ghz)
- RAM: 4Go (8x512Mo)
- Disques: 2x250Go Sata 3.5"
- OS Debian wheezy amd64
- Admins: User:Geb
- Utilisation: Hôte Xen et services
- IP: 192.168.0.190
- SSH: d6:3b:3e:1c:88:47:96:77:3e:62:ab:6b:65:df:ae:f5.
Partitionnement
Identique sur chaque disque:
- 100MB Raid1 /boot
- 4GB Chiffré aes-xts-256 Swap
- 246GB chiffré aes-xts-256 LVM
- host-rootfs: 2GB
- host-usr: 2GB
- host-var: 2GB
- host-home: 2GB
Performances du chiffrement:
(depuis une live wheezy ; avec le cryptsetup-bin de jessie) root@debian:/home/user# uptime ; uname -a ; cryptsetup --version ; cryptsetup benchmark ; uptime 01:31:18 up 18 min, 10 users, load average: 0.43, 0.45, 0.32 Linux debian 3.2.0-4-amd64 #1 SMP Debian 3.2.57-3 x86_64 GNU/Linux cryptsetup 1.6.4 # Tests are approximate using memory only (no storage IO). PBKDF2-sha1 190235 iterations per second PBKDF2-sha256 112027 iterations per second PBKDF2-sha512 72415 iterations per second PBKDF2-ripemd160 158108 iterations per second PBKDF2-whirlpool 61020 iterations per second # Algorithm | Key | Encryption | Decryption aes-cbc 128b 109.7 MiB/s 123.5 MiB/s serpent-cbc 128b 49.3 MiB/s 51.8 MiB/s twofish-cbc 128b 107.4 MiB/s 124.6 MiB/s aes-cbc 256b 88.1 MiB/s 96.9 MiB/s serpent-cbc 256b 49.3 MiB/s 51.9 MiB/s twofish-cbc 256b 107.4 MiB/s 124.5 MiB/s aes-xts 256b 122.6 MiB/s 122.5 MiB/s serpent-xts 256b 51.6 MiB/s 51.6 MiB/s twofish-xts 256b 109.1 MiB/s 108.5 MiB/s aes-xts 512b 96.0 MiB/s 96.1 MiB/s serpent-xts 512b 51.6 MiB/s 51.6 MiB/s twofish-xts 512b 108.5 MiB/s 107.9 MiB/s 01:31:47 up 19 min, 10 users, load average: 0.60, 0.48, 0.33
Réseau
Bounding: les deux interfaces sont jointes
$ cat /etc/network/interfaces auto bound0 iface bound0 inet static address 192.168.0.190 netmask 255.255.255.0 gateway 192.168.0.254 slaves eth0 eth1 bound_mode active-backup mii_mode 100 bound_downdelay 200 bound_updelay 200 post-up sysctl net.ipv6.conf.bound0.accept_dad = 0 iface bound0 inet6 auto
Packages installés
sudo htop mc ntpdate ntp postfix cpufrequtils screen lm-sensors ipmitools openipmi