Transparent data encryption test report

This topic describes how enabling or disabling transparent data encryption (TDE) affects database performance in OceanBase Database, helping you evaluate whether to use TDE.

Test conclusions

After enabling TDE, tests were conducted on OLTP scenarios with 128/256 concurrent connections. There was no performance impact in update scenarios, but slight performance degradation was observed in other scenarios.

• In point select scenarios, performance dropped by about 3%. In read-only scenarios, the decrease was around 1%.
• In read-write scenarios, performance dropped by about 2%. In write-only scenarios, the decrease was around 1%. In insert scenarios, the decrease was also around 1%.

Overall, the most noticeable performance impact was seen in point select and read-write scenarios, but in all cases, the decrease was less than 3%.

Test environment

• Cluster configuration

  Item	Configuration details
  Cluster version	OceanBase V4.2.1.8
  Cluster specification	2F1A, primary zone = zone1, 8 CPU cores, 16 GB memory
  Cluster machine	CPU: 8 cores Operating system: CentOS Linux release 5.10.134 (Core) Memory: 61 GB

• Client configuration

  Item	Configuration details
  Operating system	CentOS Linux release 5.10.134 (Core)
  Sysbench version	sysbench 1.0.20
  CPU specification	8 cores
  Memory	30 GB

Test tools

Sysbench is a cross-platform, multi-threaded, modular open-source benchmarking tool used to evaluate system performance under high-load database operations.

Test metrics

• Transactions per second (TPS): The number of transactions executed by the database per second, measured by the number of successful COMMIT operations.

• Average transaction latency: The average time taken by the database to execute a single transaction, measured in milliseconds (ms).

Test procedure

This test uses 128 tables, each with 1 million rows of data, and an execution time of 60 seconds as an example.

Install the sysbench tool

The sysbench tool can be installed either with the yum install command or manually.

• To install with the yum install command:

  On the client machine, run the following command to install sysbench:

  sudo yum install sysbench
  

• To install manually:

  1. Download sysbench.

     For sysbench download instructions, see Download sysbench.

  2. Unzip the sysbench package.

     unzip ./1.0.20.zip
     

  3. Compile sysbench.

     Enter the unzipped sysbench directory and run the following commands to compile sysbench:

     [wieck@localhost ~]# cd sysbench-1.0.20
     [wieck@localhost sysbench-1.0.20]# ./autogen.sh
     [wieck@localhost sysbench-1.0.20]# ./configure --prefix=/usr/sysbench/ --with-mysql-includes=/usr/include/mysql/ --with-mysql-libs=/usr/lib64/mysql/ --with-mysql
     [wieck@localhost sysbench-1.0.20]# make
     [wieck@localhost sysbench-1.0.20]# make install
     

     Parameters:

     Parameter	Description
     --prefix	Specifies the installation directory for sysbench.
     --with-mysql-includes	Specifies the includes directory for MySQL.
     --with-mysql-libs	Specifies the lib directory for MySQL.
     --with-mysql	sysbench supports MySQL by default.

  4. Run the following command to verify that sysbench was installed successfully:

     [wieck@localhost sysbench-1.0.20] $./src/sysbench --help
     

     If you see the following output, sysbench was installed successfully:

     Usage:
         sysbench [options]... [testname] [command]
     Commands implemented by most tests: prepare run cleanup help
     

Run the test

1. Log in to the test tenant.

   obclient -h$host -P$port -u$user_name -p****** 
   

2. Purge obsolete data to free up disk space.

   obclient> PURGE RECYCLEBIN; 
   

3. Set the query timeout.

   obclient > set global ob_query_timeout=36000000000;
   

4. Set the transparent encryption method.

   The transparent encryption method is controlled by the tenant-level parameter tde_method. For more information about tde_method, see tde_method.

   For more information on configuring transparent encryption, see Database transparent encryption.

   Notice

   Once the tde_method parameter is set, it cannot be changed.

   obclient > ALTER SYSTEM SET tde_method='internal';
   

5. Exit the database and use sysbench to load the test data.

   [wieck@localhost src]# ./sysbench --db-driver=mysql --mysql-host=[database server host] --mysql-port=[database server port] --mysql-user=[database user name] --mysql-password=[database user password] --mysql-db=testdb --table_size=1000000 --tables=128 --threads=128 --time=60 oltp_read_write prepare
   

6. Run the custom test script.

   [wieck@localhost src]# ./sysbench --db-driver=mysql --mysql-host=[database server host] --mysql-port=[database server port] --mysql-user=[database user name] --mysql-password=[database user password] --mysql-db=testdb --table_size=1000000 --tables=128 --threads=128 --time=60 oltp_read_write run
   

7. Clean up the test data.

   [wieck@localhost src]# ./sysbench --db-driver=mysql --mysql-host=[database server host] --mysql-port=[database server port] --mysql-user=[database user name] --mysql-password=[database user password] --mysql-db=testdb --table_size=1000000 --tables=128 --threads=128 --time=60  oltp_read_write cleanup
   

Test results