CFD Online Logo CFD Online URL
www.cfd-online.com
[Sponsors]
Home > Forums > General Forums > Hardware

Intel security flaw - windows update fix 40% slowdown

Register Blogs Members List Search Today's Posts Mark Forums Read

Like Tree4Likes
  • 2 Post By pbrady2013
  • 2 Post By pbrady2013

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old   January 3, 2018, 15:08
Default Intel security flaw - windows update fix 40% slowdown
  #1
New Member
 
Join Date: Nov 2017
Posts: 22
Rep Power: 8
fonograph is on a distinguished road
All intel cpu made in last 10 years have serious security problem,the only fix is windows update,performance will suffer with up to 40% slowdown.Thats what I have read.

I just bought 8600k cpu,it was deliverrd today,it is still unopened.Should I return it and get Ryzen?

I read that AMD isnt affected but the programers can be lazy and apply the security fix to AMD cpus too to avoid making alternative version specificaly for machines running AMD without the performance slowing fix that only Intel needs.
fonograph is offline   Reply With Quote

Old   January 3, 2018, 15:26
Default
  #2
Super Moderator
 
flotus1's Avatar
 
Alex
Join Date: Jun 2012
Location: Germany
Posts: 3,395
Rep Power: 46
flotus1 has a spectacular aura aboutflotus1 has a spectacular aura about
These performance drops are "up to xy%".
There are already a lot of benchmarks out there that show negligible performance degradation for a large range of applications. My educated guess is that CFD performance will not be affected. If you want to switch manufacturers due to general loss of trust is a different story though
flotus1 is offline   Reply With Quote

Old   January 3, 2018, 16:17
Default
  #3
Senior Member
 
Simbelmynė's Avatar
 
Join Date: May 2012
Posts: 542
Rep Power: 15
Simbelmynė is on a distinguished road
Or you could go with Linux and pick an older kernel without the updated block of the security hole.
Simbelmynė is offline   Reply With Quote

Old   January 8, 2018, 09:18
Default
  #4
Senior Member
 
ghost82's Avatar
 
Rick
Join Date: Oct 2010
Posts: 1,016
Rep Power: 26
ghost82 will become famous soon enough
I'm interested in this topic too.
At the moment, I would go for not updating my windows 7 sp1 machines (it seems the patch is not yet released at the moment for windows 7 sp1, maybe it will be available tomorrow or in the near future).
KB4056897 is available for win 10 now.

I have also seen some performance charts (pre and post both meltdown and spectre patches) with a core i7 cpu about compressing/decompressing, read/write timing from/to hd, 3d content creation and rendering, simulation in excel, encryption/decryption: none of these operations really affected the performance.
However, I've also seen a chart about performance of a cloud service and there I could see performance degradation.

So, still not sure if these patches will slowdown cfd calculations....
__________________
Google is your friend and the same for the search button!
ghost82 is offline   Reply With Quote

Old   January 16, 2018, 20:33
Default
  #5
Member
 
Peter Brady
Join Date: Apr 2014
Location: Sydney, NSW, Australia
Posts: 54
Rep Power: 11
pbrady2013 is on a distinguished road
Hi All,

For what its worth we (I work at Pacific ESI) are working with some colleagues at the UTS Faculty of Engineering and IT as we patch our machines. So far in our initial tests we are not getting significant performance hits from from the patches. Now I do stress that these are initial tests and we've started with our test machines but for a dual socket Dell R7910 Xeon E5-2699 v4 with 256GM RAM running RHEL 7.x with both hardware and software patches applied our run times are not that much different. In fact, within the bounds of testing I'd say that there is almost no difference.

See attached for a full graph.

There's a more detailed report on my personal webpage or LinkedIn. I'm happy to post more as we move through the rest of our machines and do a more complete analysis.
Attached Images
File Type: jpg 20180116a_20180116b_compareTwo_005.jpg (75.6 KB, 24 views)
ghost82 and flotus1 like this.
pbrady2013 is offline   Reply With Quote

Old   January 17, 2018, 04:38
Default
  #6
Senior Member
 
ghost82's Avatar
 
Rick
Join Date: Oct 2010
Posts: 1,016
Rep Power: 26
ghost82 will become famous soon enough
Thank you very much Peter for your valuable reply!
__________________
Google is your friend and the same for the search button!
ghost82 is offline   Reply With Quote

Old   January 17, 2018, 05:30
Default
  #7
New Member
 
Join Date: Nov 2017
Posts: 22
Rep Power: 8
fonograph is on a distinguished road
Quote:
Originally Posted by pbrady2013 View Post
Hi All,

For what its worth we (I work at Pacific ESI) are working with some colleagues at the UTS Faculty of Engineering and IT as we patch our machines. So far in our initial tests we are not getting significant performance hits from from the patches. Now I do stress that these are initial tests and we've started with our test machines but for a dual socket Dell R7910 Xeon E5-2699 v4 with 256GM RAM running RHEL 7.x with both hardware and software patches applied our run times are not that much different. In fact, within the bounds of testing I'd say that there is almost no difference.

See attached for a full graph.

There's a more detailed report on my personal webpage or LinkedIn. I'm happy to post more as we move through the rest of our machines and do a more complete analysis.
Did you just updated Windows? Did you update Bios?

The Windows patch notes mention that just the Windows update isnt enough to protect,Bios must be updated too.The performance hit is cumulative and bigger portion of it comes from the Bios update.
fonograph is offline   Reply With Quote

Old   January 17, 2018, 05:36
Default
  #8
Senior Member
 
ghost82's Avatar
 
Rick
Join Date: Oct 2010
Posts: 1,016
Rep Power: 26
ghost82 will become famous soon enough
Quote:
Originally Posted by fonograph View Post
Did you just updated Windows? Did you update Bios?
It's written in the post:
Quote:
...with both hardware and software patches...
And also in the linked article:
Quote:
The machine was patched with both the Dell’s BIOS and RedHat’s OS patches.
__________________
Google is your friend and the same for the search button!
ghost82 is offline   Reply With Quote

Old   January 17, 2018, 05:45
Default
  #9
Member
 
Peter Brady
Join Date: Apr 2014
Location: Sydney, NSW, Australia
Posts: 54
Rep Power: 11
pbrady2013 is on a distinguished road
Quote:
Originally Posted by fonograph View Post
Did you just updated Windows? Did you update Bios?

The Windows patch notes mention that just the Windows update isnt enough to protect,Bios must be updated too.The performance hit is cumulative and bigger portion of it comes from the Bios update.
Hi Fonograph,

Minor note: all my CFD boxes are RedHat linux and mostly they are on the seven series, I've a few older that are still on the six series.

OK, now that is a good question though, in this case we'd applied the manufacture's (Dell/Intel) BIOS patches and were testing the effect of turning on and off the RedHat kernel level fixes only. Thinking about this further the better bet would be to:
  1. Do a full set of benchmarks with base BIOS and OS
  2. Update the BIOS -> benchmark
  3. Update the OS -> benchmark
Thanks for the feedback. I've got a whole lot more boxes to run through so I'll post the updates as I get them in. I currently don't have a baseline comparison with the same benchmark for the E5-2699v4.


Cheers,
-pete
pbrady2013 is offline   Reply With Quote

Old   January 17, 2018, 08:39
Default
  #10
Super Moderator
 
flotus1's Avatar
 
Alex
Join Date: Jun 2012
Location: Germany
Posts: 3,395
Rep Power: 46
flotus1 has a spectacular aura aboutflotus1 has a spectacular aura about
Is there any point in applying only one of the fixes and leaving the OS unpatched?
Because if there is not, I think your testing method is sufficient without 2.
flotus1 is offline   Reply With Quote

Old   January 17, 2018, 18:32
Default
  #11
Member
 
Peter Brady
Join Date: Apr 2014
Location: Sydney, NSW, Australia
Posts: 54
Rep Power: 11
pbrady2013 is on a distinguished road
Quote:
Originally Posted by flotus1 View Post
Is there any point in applying only one of the fixes and leaving the OS unpatched?
Because if there is not, I think your testing method is sufficient without 2.
Thanks for the comment. I tend to agree.

What I'll do though is we have more test machines to go through over the next week or so before patching a fleet of boxes in a HPC cluster. We have a variety of machines from E3-1270v3s up to Gold 6126s.

I'll continue to runs benchmarks as we go, with input from these comments, and see what happens. I'll post what I get and there should be some non-CFD results as well if people are interested.

Cheers,
-pete
pbrady2013 is offline   Reply With Quote

Old   January 17, 2018, 20:31
Default CFD-ACE+ Test Set from a Dell T1700
  #12
Member
 
Peter Brady
Join Date: Apr 2014
Location: Sydney, NSW, Australia
Posts: 54
Rep Power: 11
pbrady2013 is on a distinguished road
Thanks go to Matt Gaston at UTS, one of my collaborators, for running this set of benchmarks with CFD-ACE+. His methodology was as per my previous post were he looked at three cases:
  1. Base case: BIOS A19, Kernel 3.10.0-514.6.1.el7.x86_64
  2. Fully patched (A24, 3.10.0-693.11.6.el7.x86_64) but with RHEL tunables off
  3. Fully patched (A24, 3.10.0-693.11.6.el7.x86_64) but with RHEL tunables on.
Further, he ran the benchmarks a few times to look at the repeatability. In the table below "Relative Difference" is simple t(measured)/t(base) and a simple sample standard deviation was used to estimate the spread of the results. For CFD-ACE+ two benchmarks were used:
  1. VOF
    1. 1.000 ± 0.841%
    2. 0.984 ± 0.031%
    3. 1.023 ± 0.111%
  2. Multi4
    1. 1.000 ± 0.219%
    2. 0.994 ± 0.233%
    3. 1.009 ± 0.253%
Looking at the CFD-ACE+ results, it suggests that for older machines simply applying the newer bios will mitigate the fix and reduced performance hits due to the newer/better microcode. This then does lead to the question of what happens to newer machines which already have the better microcode on them. As I get around to those I'll post results.

In case you are interested similar tests were run for MATLAB (run times inproved across the board) and ANSYS (similar results to ACE) over at my website.

Cheers,
-pete
ghost82 and tombo like this.
pbrady2013 is offline   Reply With Quote

Old   February 8, 2018, 17:34
Default
  #13
New Member
 
Mike
Join Date: Feb 2018
Posts: 12
Rep Power: 8
Superdude_123 is on a distinguished road
On our AMD Ryzen 1950x machine, I haven't seen anything worth noting (Linux as OS). I actually found that adding a 3rd and 4th stick of ram had more effect on speed increases than Ubuntu 16.04 updates did in terms potential speed degradation.
Superdude_123 is offline   Reply With Quote

Old   April 5, 2018, 00:53
Default Spectre Of A Meltdown
  #14
New Member
 
Sophie Wilson
Join Date: Apr 2018
Posts: 2
Rep Power: 0
sophiewilson0191 is on a distinguished road
How Would Spectre or Meltdown Work?

Both exploit types have been reported to be associated with a computing function known as speculative execution. This development allows microprocessors to ‘hold’ some types of information in reserve, in the anticipation that it will be the next piece of data required by the user. This information may come in the form of what code should run next or probable queries; alternatively, it may be of a sensitive nature, for example passwords or card numbers.

Information that is ‘lined up’ in this way may therefore be predicted through inference-based analysis. Executive function is one of many adaptations that promote processing speed and economy over the years, and have been further emphasised by manufacturers responding to demands for ever more responsive and efficient chipsets. However, this has resulted in the potential for attacks on device properties such as executive functions, which are collectively known as ‘side channels’.

For more information visit here.
sophiewilson0191 is offline   Reply With Quote

Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
CFX 17.2 Crashes after Windows 10 Update Chris13 CFX 4 June 8, 2017 11:10
[OpenFOAM] Color display problem to view OpenFOAM results. Sargam05 ParaView 16 May 11, 2013 01:10
CFX11 + Fortran compiler ? Mohan CFX 20 March 30, 2011 19:56


All times are GMT -4. The time now is 02:02.