Java digesting performance

For the ACE audit manager, reading and generating digests on files is slowest part of auditing. In previous (1.6 and lower) versions of ACE digesting was done in a simple, read/update digest loop using Java's DigestInputStream. This appeared to work good enough, however I wanted to see what effect large blocks have on this model. When reading from remote resources, we up the block size from a standard 4-32k to 1MG.

Using that model, here's how performance looked for a variety of block sized, both aligned and unaligned. The following table compares both only reading and reading then updating. The test data ~16G of large (27MG) files on a SATA disk, running on a machine w/ 8G ram and an Intel Q9550 @2.83Ghz. The digest algorithm was SHA-256, using Sun's provider.

Block size	read	digest only	read+digest
4096	96.5 MB/s	69.6 MB/s	53.1 MB/s
8192	95.9 MB/s	69.6 MB/s	54.8 MB/s
10000	94.6 MB/s	69.2 MB/s	54.0 MB/s
1048576	97.8 MB/s	72.1 MB/s	34.3 MB/s

The interesting take-away is how much worse large block preforms when you follow the read then process model.

The next step is to change the model and split the digesting and reading into separate threads. The new model uses two threads and two queues. The two threads exchange a pre-allocated set of byte arrays using an empty-array queue and a filled-array queue. These queues were Java LinkedBlockingQueues.

Read Thread:

1. Pop byte buffer from empty-array queue
2. Read into the byte array.
3. Push buffer into filled-array queue.

Digest Thread:

1. Pop byte buffer from filled-array queue
2. Update digest using byte array.
3. Push buffer into empty-array queue.

On the following test runs, I used 5 byte buffers of the above sizes to see how performance would vary.

Block size	read	digest only	read+digest
4096	92.2 MB/s	65.63 MB/s	54.7 MB/s
8192	92.4 MB/s	67.5 MB/s	57.0 MB/s
10000	87.8 MS/s	68.0 MB/s	57.2 MB/s
1048576	97.4 MB/s	72.2 MB/s	64.7 MB/s

Small block performance is pretty much unchanged, however on large block, large file there is a substantial speedup running at almost 90% of the possible digest speed vs 48% possible speed. The next version of ACE will switch to this method of data reading.

ACE 1.6 released

ACE 1.6 has been released. Among it's notable features are:

• Support for exporting token stores.
• New maven-based build system, for easier 3rd party collaboration
• checkm manifest exporting
• mproved database storage of tokens.
• Open subversion repository, and nightly builds.

Download here: ACE Download

A complete list of all improvements and bug fixes is available at: Changelog

When upgrading to 1.6, ACE will attempt to migrate all existing tokens from the older table layout to the newer. This means, the first time you run 1.6, it may take several minutes to perform this migration. The web interface will be unavailable during this migration. You can follow the status of the migration by looking at the ace log file, located in /tmp/aceam.log.