OCI EKMS Performance Summary
We have tested different environments to capture performance metrics for the CipherTrust Cloud Key Manager (CCKM) Oracle Cloud Infrastructure (OCI) External Key Manager Service (EKMS) integration. The performance results provided within this document demonstrate the effects of deployment choices on throughput for OCI HYOK key encrypt operations for one key. This can help you plan your CipherTrust Manager deployment to meet your performance needs for OCI EKMS integration.
All environments used an open-source k6.io tool as the REST client to simulate encrypt requests from OCI External Vault. The client ran on a virtual machine with 50 GB system volume, 8 CPUs, and 64 GB of memory.
Note
Actual performance numbers in your environment may be different. The results can vary based on factors, such as how and where the CipherTrust Manager is deployed, CipherTrust Manager resources, the location of cloud KMS, the key source of your choice, the network connectivity between the CipherTrust Manager, OCI Cloud and your key source, as well as how the traffic is load balanced.
Tested Environments
The following deployments were tested:
The following CipherTrust Manager release version was employed in the tested deployments:
| Description | Value |
|---|---|
| Release version | 2.15.0.10938 RC1 |
Test Process
The test consisted of starting a given number of virtual users to perform encrypt operations on the OCI EKMS/HYOK key. Each user simulated a separate thread.
The total test duration was 40 seconds for each reading. The test was divided into the following increments:
The ramp-up time was 5 seconds. Virtual users were started.
The test duration was 30 seconds for each reading. Virtual users make wrap requests during this time.
Ramp-down time was 5 seconds. Virtual users were stopped until there were zero active virtual users.
In all environments, the acceptable response latency threshold by OCI is assumed as 100ms. But, for a zero network latency environment, it is assumed as 30ms.
Repeating the test in your environment
We have published the scripts used with k6.io on Github, for you to repeat the tests in your own environments as desired.
OCI EKMS Deployment Results
CipherTrust Manager as a Key Source
Single Node of CipherTrust Manager on Premises, K6 Client on Premises
This deployment includes the following:
Single node of CipherTrust Manager on premises
K6 client on premises
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 20299 | 507.43 | 25 |
| 20 | 21617 | 540.34 | 52 |
| 30 | 21849 | 546.12 | 79.81 |
| 40 | 21714 | 542.46 | 104.91 |
| 50 | 18213 | 555.26 | 154.67 |
| 60 | 18507 | 556.65 | 182.96 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 32889 | 822.66 | 14.55 |
| 20 | 38082 | 951.89 | 26.87 |
| 30 | 39502 | 987.31 | 40.58 |
| 40 | 40241 | 1005.79 | 54.06 |
| 50 | 40667 | 1016.58 | 68.00 |
| 60 | 41614 | 1040.12 | 80.52 |
| 70 | 41550 | 1038.59 | 95.76 |
| 80 | 41552 | 1036.18 | 111.07 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 41634 | 1040.58 | 11.10 |
| 20 | 55337 | 1383.14 | 17.91 |
| 30 | 58867 | 1471.27 | 27.95 |
| 40 | 59082 | 1477.00 | 39.54 |
| 50 | 59776 | 1494.32 | 50.40 |
| 60 | 59661 | 1491.23 | 61.90 |
| 70 | 60120 | 1502.92 | 73.85 |
| 80 | 60102 | 1502.30 | 84.47 |
| 90 | 60473 | 1511.00 | 95.54 |
| 100 | 59855 | 1495.95 | 102.70 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 32-CPU, 64GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 44120 | 1102.86 | 10.41 |
| 20 | 60385 | 1509.16 | 17.77 |
| 30 | 64535 | 1612.94 | 27.39 |
| 40 | 66207 | 1654.89 | 37.03 |
| 50 | 67923 | 1697.88 | 46.33 |
| 60 | 68621 | 1715.02 | 56.63 |
| 70 | 69952 | 1748.73 | 65.69 |
| 80 | 70635 | 1765.76 | 75.25 |
| 90 | 71525 | 1787.66 | 83.40 |
| 100 | 71518 | 1787.92 | 92.98 |
| 110 | 72039 | 1800.63 | 101.30 |
| 120 | 72860 | 1820.92 | 109.51 |
Single Node of CipherTrust Manager on Oracle, K6 Client on Oracle
This deployment includes the following:
Single node of CipherTrust Manager on Oracle
K6 client on Oracle
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 27611 | 690.20 | 16.96 |
| 20 | 30591 | 764.37 | 34.47 |
| 30 | 31314 | 782.84 | 52.81 |
| 40 | 31404 | 785.04 | 71.65 |
| 50 | 31283 | 782.02 | 91.73 |
| 55 | 31488 | 787.16 | 102.42 |
| 60 | 31326 | 783.04 | 112.23 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 48837 | 1220.88 | 9.35 |
| 20 | 52493 | 1312.27 | 19.97 |
| 30 | 52886 | 1322.13 | 32.40 |
| 40 | 54573 | 1364.24 | 43.91 |
| 50 | 56799 | 1419.83 | 51.95 |
| 60 | 56789 | 1419.67 | 67.59 |
| 70 | 56789 | 1451.70 | 75.79 |
| 80 | 58073 | 1431.24 | 90.20 |
| 90 | 57256 | 1467.96 | 95.49 |
| 95 | 58567 | 1464.04 | 100.91 |
| 100 | 58073 | 1451.70 | 109.91 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 60413 | 1510.16 | 7.2 |
| 20 | 65990 | 1649.62 | 17.71 |
| 30 | 66412 | 1660.12 | 29.84 |
| 40 | 67571 | 1689.26 | 39.53 |
| 50 | 68477 | 1711.87 | 49.40 |
| 60 | 70366 | 1759.05 | 57.75 |
| 70 | 70760 | 1768.85 | 68.54 |
| 80 | 71873 | 1796.73 | 77.10 |
| 90 | 72263 | 1806.35 | 86.17 |
| 100 | 72772 | 1819.25 | 94.04 |
| 110 | 73346 | 1833.49 | 102.59 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Single Instance | 32-CPU, 64GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 71518 | 1787.82 | 5.98 |
| 20 | 88173 | 2204.21 | 12.77 |
| 30 | 86032 | 2150.61 | 22.71 |
| 40 | 85805 | 2145.10 | 31.78 |
| 50 | 85583 | 2139.42 | 40.24 |
| 60 | 85821 | 2145.43 | 49.55 |
| 70 | 86075 | 2151.65 | 57.82 |
| 80 | 86951 | 2173.62 | 64.35 |
| 90 | 87175 | 2179.26 | 71.86 |
| 100 | 87318 | 2182.88 | 80.24 |
| 110 | 87690 | 2192.10 | 88.22 |
| 120 | 88433 | 2210.77 | 95.18 |
| 130 | 88332 | 2208.09 | 104.37 |
Two Clustered CipherTrust Manager Nodes on OCI, K6 Client on OCI
This deployment includes the following:
Two clustered nodes of CipherTrust Manager on OCI
K6 client on OCI
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Two Node Cluster | 4-CPU, 16GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 46542 | 1163.53 | 9.15 |
| 20 | 55006 | 1375.10 | 17.95 |
| 30 | 61006 | 1525.08 | 24.97 |
| 40 | 60945 | 1523.55 | 35.06 |
| 50 | 61603 | 1539.96 | 43.86 |
| 60 | 61142 | 1528.50 | 54.07 |
| 70 | 62901 | 1572.46 | 61.98 |
| 80 | 55531 | 1388.17 | 82.79 |
| 90 | 61666 | 1541.51 | 81.94 |
| 100 | 64201 | 1604.96 | 89.90 |
| 110 | 63181 | 1579.36 | 100.99 |
| 120 | 64013 | 1600.14 | 109.66 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Two Node Cluster | 8-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 20 | 89998 | 2249.73 | 10.48 |
| 40 | 99252 | 2481.26 | 21.72 |
| 60 | 101581 | 2539.43 | 34.71 |
| 80 | 102691 | 2565.39 | 44.81 |
| 100 | 104688 | 2616.97 | 57.19 |
| 120 | 107151 | 2678.72 | 68.64 |
| 140 | 108174 | 2704.26 | 80.55 |
| 160 | 106732 | 2668.24 | 95.14 |
| 180 | 107432 | 2685.62 | 103.87 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Two Node Cluster | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 80 | 136847 | 3420.89 | 38.81 |
| 100 | 139770 | 3494.15 | 47.48 |
| 120 | 142564 | 3563.92 | 56.84 |
| 140 | 143618 | 3590.36 | 66.54 |
| 160 | 144336 | 3608.04 | 76.48 |
| 180 | 146378 | 3659.17 | 84.24 |
| 200 | 142915 | 3572.83 | 97.54 |
| 220 | 148554 | 3713.52 | 109.64 |
| 240 | 148365 | 3708.96 | 118.59 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | OCI (India South) | Two Node Cluster | 32-CPU, 64GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 100 | 171167 | 4279.05 | 40.82 |
| 120 | 170280 | 4256.91 | 49.54 |
| 140 | 171716 | 4292.44 | 57.35 |
| 160 | 172525 | 4312.68 | 65.15 |
| 180 | 174033 | 4350.56 | 72.40 |
| 200 | 175320 | 4382.55 | 79.39 |
| 220 | 176698 | 4417.03 | 87.81 |
| 240 | 176681 | 4416.70 | 95.28 |
| 260 | 177756 | 4443.83 | 102.95 |
Single Node of CipherTrust Manager on AWS, K6 Client on OCI
This deployment includes the following:
Single node of CipherTrust Manager on AWS
K6 client on OCI
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | AWS (us-east-1) | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 2 | 286 | 250.95 | 7.14 |
| 4 | 545 | 260.74 | 13.59 |
| 6 | 826 | 258.63 | 20.51 |
| 8 | 1097 | 259.73 | 27.36 |
| 10 | 1341 | 264.73 | 33.49 |
| 20 | 2705 | 265.30 | 67.54 |
| 30 | 4065 | 265.53 | 101.44 |
| 40 | 5374 | 263.71 | 133.69 |
| 50 | 6699 | 265.47 | 166.81 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | AWS (us-east-1) | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 2 | 272 | 270.79 | 6.75 |
| 4 | 517 | 271.81 | 12.80 |
| 6 | 799 | 269.18 | 19.88 |
| 8 | 1041 | 273.10 | 25.95 |
| 10 | 1300 | 272.14 | 32.32 |
| 20 | 2630 | 272.74 | 65.73 |
| 30 | 3982 | 270.08 | 99.42 |
| 40 | 5246 | 273.78 | 130.50 |
| 50 | 6533 | 273.62 | 162.56 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | AWS (us-east-1) | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 2 | 281 | 258.18 | 7.02 |
| 4 | 558 | 258.66 | 13.88 |
| 6 | 831 | 261.11 | 20.71 |
| 8 | 1071 | 267.11 | 26.70 |
| 10 | 1367 | 257.12 | 34.10 |
| 20 | 2722 | 260.90 | 67.72 |
| 30 | 4100 | 260.75 | 102.34 |
| 40 | 5477 | 259.92 | 136.07 |
| 50 | 6811 | 260.77 | 169.62 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | AWS (us-east-1) | Single Instance | 32-CPU, 64GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | OCI (India South) | 8-CPU, 64GB RAM, 50GB HDD |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 2 | 286 | 255.92 | 7.11 |
| 4 | 564 | 260.81 | 14.01 |
| 6 | 1099 | 261.07 | 27.36 |
| 8 | 829 | 260.70 | 20.63 |
| 10 | 1376 | 261.41 | 34.31 |
| 20 | 2736 | 260.08 | 68.01 |
| 30 | 4093 | 261.50 | 102.10 |
| 40 | 5444 | 260.41 | 135.01 |
| 50 | 6838 | 258.46 | 140.56 |
Single Node of CipherTrust Manager on Premises, K6 Client on CipherTrust Manager, Zero Network Latency
This deployment includes the following:
Single node of CipherTrust Manager on premises
K6 client on CipherTrust Manager
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 1 | 5175 | 129.35 | 10.01 |
| 2 | 8783 | 219.55 | 11.03 |
| 5 | 13768 | 344.16 | 18.30 |
| 7 | 14861 | 371.50 | 24.52 |
| 10 | 16229 | 405.69 | 33.04 |
| 15 | 16610 | 415.24 | 50.43 |
| 20 | 16617 | 415.41 | 68.97 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 2 | 8827 | 220.61 | 10.58 |
| 5 | 17738 | 443.38 | 13.66 |
| 7 | 22478 | 561.93 | 15.15 |
| 10 | 26744 | 668.58 | 18.49 |
| 15 | 30688 | 767.15 | 24.85 |
| 20 | 32169 | 804.29 | 32.10 |
| 25 | 32814 | 820.29 | 40.10 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 5 | 23123 | 577.92 | 9.38 |
| 10 | 37631 | 940.72 | 12.57 |
| 15 | 45749 | 1143.57 | 16.07 |
| 20 | 44827 | 1120.52 | 22.23 |
| 25 | 48074 | 1201.65 | 26.35 |
| 30 | 52257 | 1306.33 | 30.88 |
| 35 | 53415 | 1335.24 | 35.38 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 32-CPU, 64GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 5 | 12954 | 323.54 | 16.46 |
| 10 | 28286 | 707.02 | 15.53 |
| 15 | 39067 | 976.20 | 17.64 |
| 20 | 45122 | 1127.82 | 20.72 |
| 25 | 48757 | 1218.77 | 24.31 |
| 30 | 50909 | 1272.30 | 28.54 |
| 35 | 51572 | 1288.99 | 33.41 |
Luna HSM as a Key Source
Single Node of CipherTrust Manager on Premises, K6 client on Premises, Single Node of HSM
This deployment includes the following:
Single node of CipherTrust Manager on premises
K6 client on premises
Single node of HSM on premises
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 11225 | 280.50 | 45.38 |
| 20 | 11775 | 294.36 | 93.55 |
| 25 | 12109 | 302.69 | 113.76 |
| 30 | 12114 | 302.82 | 138.11 |
| 40 | 12272 | 306.80 | 183.82 |
| 50 | 12411 | 310.23 | 230.62 |
| 60 | 12225 | 305.57 | 276.57 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 18436 | 460.69 | 25.07 |
| 20 | 22858 | 571.26 | 43.26 |
| 30 | 24602 | 614.82 | 62.91 |
| 40 | 24966 | 623.92 | 84.56 |
| 45 | 25387 | 634.59 | 94.60 |
| 50 | 25493 | 637.13 | 107.42 |
| 60 | 25642 | 640.94 | 129.93 |
| 70 | 25800 | 644.84 | 154.20 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 37136 | 928.17 | 12.61 |
| 20 | 51297 | 1282.04 | 19.17 |
| 30 | 53242 | 1330.81 | 30.54 |
| 40 | 54518 | 1362.76 | 40.99 |
| 50 | 54984 | 1374.58 | 52.54 |
| 60 | 55101 | 1377.31 | 64.34 |
| 70 | 56116 | 1402.79 | 76.03 |
| 80 | 55753 | 1396.67 | 87.48 |
| 90 | 55777 | 1394.21 | 100.01 |
| 100 | 56125 | 1402.76 | 111.71 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 28956 | 723.62 | 15.67 |
| 20 | 41891 | 1046.84 | 23.14 |
| 30 | 47908 | 1197.52 | 31.51 |
| 40 | 50683 | 1266.91 | 41.27 |
| 50 | 52991 | 1324.65 | 49.40 |
| 60 | 56606 | 1414.90 | 59.65 |
| 70 | 57283 | 1431.93 | 69.18 |
| 80 | 58169 | 1454.08 | 79.86 |
| 90 | 59790 | 1494.60 | 87.65 |
| 100 | 60458 | 1510.72 | 96.90 |
| 110 | 61227 | 1530.05 | 105.71 |
Single Node of CipherTrust Manager on Premises, K6 client on Premises, HSM in HA Mode
This deployment includes the following:
Single node of CipherTrust Manager on premises
K6 client on premises
HSM in HA mode
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 11234 | 280.83 | 45.37 |
| 20 | 11816 | 295.35 | 92.86 |
| 25 | 12102 | 302.52 | 113.20 |
| 30 | 12161 | 303.93 | 136.79 |
| 40 | 12164 | 304.04 | 184.84 |
| 50 | 12189 | 304.666 | 232.04 |
| 60 | 12043 | 301.03 | 284.89 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 17985 | 449.59 | 25.72 |
| 20 | 23564 | 588.82 | 41.57 |
| 30 | 24963 | 623.88 | 61.80 |
| 40 | 25467 | 636.57 | 83.33 |
| 50 | 26518 | 662.90 | 102.92 |
| 60 | 26507 | 662.56 | 126.52 |
| 70 | 26426 | 660.48 | 149.56 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 23799 | 594.90 | 18.53 |
| 20 | 36102 | 902.26 | 25.99 |
| 30 | 41629 | 1040.41 | 34.69 |
| 40 | 43610 | 1090.23 | 43.97 |
| 50 | 45497 | 1137.72 | 55.17 |
| 60 | 45341 | 1132.72 | 68.07 |
| 70 | 42385 | 1059.05 | 85.37 |
| 80 | 43175 | 1079.02 | 97.42 |
| 90 | 43658 | 1091.35 | 111.28 |
| 95 | 42935 | 1073.10 | 101.68 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Client Details
| 0S Type | Location | Client Configuration |
|---|---|---|
| Ubuntu-22.04 | SanJose Lab | 8-CPU, 64GB RAM, 50GB HDD |
Luna Details
Location: SanJose Lab
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 10 | 27354 | 683.48 | 15.83 |
| 20 | 45355 | 1133.54 | 20.56 |
| 30 | 49844 | 1245.68 | 29.37 |
| 40 | 52258 | 1305.86 | 39.04 |
| 50 | 55543 | 1387.86 | 47.99 |
| 60 | 57365 | 1433.90 | 57.45 |
| 70 | 58480 | 1461.91 | 66.59 |
| 80 | 60001 | 1499.55 | 75.99 |
| 90 | 60492 | 1511.70 | 85.38 |
| 100 | 61408 | 1534.53 | 95.36 |
| 110 | 60635 | 1515.60 | 105.31 |
Single Node of CipherTrust Manager on Premises, K6 Client on the CipherTrust Manager, Zero Network Latency
This deployment includes the following:
Single node of CipherTrust Manager on premises
K6 client on CipherTrust Manager
4 CPU 16 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 4-CPU, 16GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 2 | 5432 | 135.78 | 17.8 |
| 5 | 8978 | 224.43 | 26.76 |
| 6 | 9752 | 243.74 | 30.01 |
| 7 | 10245 | 256.06 | 33.97 |
| 10 | 10952 | 273.78 | 46.84 |
| 15 | 11419 | 285.41 | 69.21 |
| 20 | 11403 | 285.07 | 95.21 |
8 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 8-CPU, 32GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 4 | 10465 | 261.57 | 17.54 |
| 8 | 16066 | 401.46 | 23.60 |
| 12 | 20510 | 512.60 | 30.79 |
| 15 | 21416 | 535.34 | 34.05 |
| 20 | 22573 | 564.32 | 44.22 |
| 25 | 24195 | 604.76 | 52.81 |
16 CPU 32 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 16-CPU, 32GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 5 | 23583 | 589.55 | 9.63 |
| 10 | 33399 | 834.82 | 14.20 |
| 15 | 40881 | 1021.89 | 18.05 |
| 20 | 44951 | 1123.66 | 22.20 |
| 25 | 47429 | 1185.56 | 26.64 |
| 30 | 49079 | 1226.71 | 31.59 |
| 35 | 49384 | 1234.37 | 37.03 |
32 CPU 64 GB
Here are the details of this deployment:
CM Details
| CM Version | CM Location | Instance Type | CM Configuration | Source |
|---|---|---|---|---|
| 2.15.0.10938 RC1 | SanJose Lab | Single Instance | 32-CPU, 64GB RAM | CipherTrust Manager |
Results
| Number of Virtual Users | Total Operations | Throughput (Ops/Sec) | 90% Time |
|---|---|---|---|
| 5 | 12652 | 316.14 | 16.86 |
| 10 | 27958 | 698.76 | 15.79 |
| 15 | 38461 | 961.34 | 17.64 |
| 20 | 44388 | 1109.34 | 21.07 |
| 25 | 47964 | 1198.71 | 24.80 |
| 30 | 50565 | 1263.22 | 28.66 |
| 35 | 51783 | 1295.30 | 33.71 |
Conclusion
The network latency between the K6 client which is simulating traffic from Oracle KMS to CipherTrust Manager affects the performance. In the environments, where the K6 client and the CM are closer geographically or are in the same network, the performance is higher.
Increasing the number of nodes enhances the performance.
Increasing CM RAM and CPU increases the performance.
The number of HSM nodes in HA doesn't affect the throughput.
In the below two graphs, increasing the CM RAM and CPU improves the performance.
In the below two graphs, increasing the CM RAM and CPU improves the performance. We have considered the threshold 30ms, where the K6 client is running on CM.
The performance is better when the Key Source is CM as compared to the Luna HSM, where the K6 client is running on CM.
