login vsi company logo login vsi company logo 250x40

 

Get the best possible VDI performance, density and availability with Login VSI
Our Solutions

Testing Meltdown and Spectre patches: VMware ESXI v1

Meltdown and Spectre

In my previous Blogpost about testing Meltdown and Spectre patches, the results focused on XenServer. In this blogpost we are going to talk about ESXI and the performance impact we measured in our labs.

After all the news and hectic around Meltdown and Spectre it seems things are calming down a bit. Recent talks are focusing more on next generation exploits rather than the performance impact. The Login VSI Meltdown and Spectre emergency edition has been a great success and helped many of our customers, vendors and community friends. I’d like to share some results from our internal performance validation labs where I’ve conducted tests on a large number of operating systems measuring the impact of patches on the OS, Hypervisor and BIOS level. Please keep in mind that this is a lab environment, results will vary on your own systems.

I focused on Windows Server 2012R2 and Windows Server 2016 for these tests and started with a clean image that was optimized for performance with VMware OSOT. With every test I added a new layer of patches, adding the layers of mitigation one at a time.

Meltdown & Spectre

Applied Patches:

ScenarioAdded Patch
Clean Windows 2012R2 feb. 2018 updates / Windows Server 2016 (Update feb 2018)
Microsoft Patch (MS) KB4056898 for 2012R2, KB4056890 for 2016
Microsoft & Hypervisor Patch (MS-HV) ESXi650-201803001 (52456)
Microsoft, Hypervisor and Microcode Patch (MS-HV-MCU) Dell R730 Bios ver. 2.7.1

The results

When we look at the results for Microsoft Server 2016 we see that the results are like the 2012R2 tests. But the impact is just slightly less (about 15-20%).

Of course as always, these tests are done in our lab and results may vary upon testing your own hardware and software combination.

VSIMax VMware
VSImax Results, higher is better

VSIBase VMware
VSIBase results, lower is better

Percentile Impact 2016 VMware
2016 % Impact closest to 0 is best

Conclusion

We’ve learned that Hypervisors react different to Meltdown and Spectre, versions, vendors and the order of patching will have an impact on how performance is affected. Its therefore recommended to run simulations in your own environment as mileage will vary. In the blogpost written by my colleague Blair we do see that the impact on Server 2016 is less than we see on Server 2012R2.

This raises again a number of new questions:

  1. Which level of the Meltdown and Spectre patches impact the ESXI hypervisor the most?
  2. How does optimization of the VM influence the test results?
  3. How do other hypervisors behave after implementing the Meltdown and Spectre patches?

What’s next

These tests were performed with Windows Server operating systems. I am currently switching focus to Client operating systems namely Windows 10 and Windows 7 to see what kind of impact we can deduce here.   

About the Lab used for these tests

Automate, automate, automate. In our VDILIKEAPRO test lab we have minimized human interaction (and thus error) by making sure all processes are executed fully automatic. For example the base images are created using the Microsoft Deployment Toolkit where as a next step PowerShell magic (thanks Henk & Sonny!) takes over and automatically clones the VM’s 6 times on a single host, prepares them for use, and runs 10 automated test cycles. Results are then averaged ignoring the first run.

All the connections to the target machines are done using the RDP protocol. And the Login VSI default workload for this type of testing, the Knowledge Worker workload, was used for all tests.

VDILIKEAPRO Laboratories

Physical Virtual Infrastructure

 


 

Start using Login VSI today

Our industry-standard software is built to help you avoid problems, lower costs and improve performance.
Request a price or get your trial below, and benefit from our award-winning services.

Request Price  Request Trial

 


 

About the company Login VSI

The company Login VSI provides end-user performance insights for virtualized desktop and server-based computing environments. Enterprise IT departments use flagship product Login VSI (for load testing) and new addition Login PI (for continuity testing) in all phases of their virtual desktop deployment—from planning to deployment to change management—to build and safeguard a good performance, a high availability, and (as a result) a good and consistent end-user experience. For more information about Login VSI or for a free test license contact us.

 

About the author

Tom Willemsen is a Support Engineer at Login VSI and helps customers and gives advice about testing with Login VSI. He loves to travel, read about history, and see different cultures. In his free time, Tom likes to game and watch movies.


Tags: VSImax, Spectre, Meltdown, VSIbase

Popular Blogs

Login VSI - Press Release - IGEL - Login VSI Partner to Optimize End User Computing Experience Image

[Press Release] IGEL Partners with Login VSI to Optimize the End User Computing Experience

Login PI enables organizations to better protect the performance and availability of their IGEL OS-powered virtual desktop environments Continue Reading
Login VSI - Blog - Login PI Blog Teaser Image - Windows Virtual Desktop: How To Monitor User Experience With Login PI

Windows Virtual Desktop – How to Monitor User Experience?

Microsoft has just announced the public preview of their new Windows Virtual Desktop (WVD) offering at Microsoft Ignite on Tour in Amsterdam today. For those of you who’ve not followed the rumors or the private beta, here’s the outline... Continue Reading
Login VSI Blog - Teaser Image - A Practical Guide to VDI Change Management - Part 1

A Practical Guide to VDI Change Management

Part 1: IT Change Management in general The first in an 8-part series, this practical guide to VDI Change Management will guide you through the transformation of the IT department from a back-end function into a core competency for every modern organization. Continue Reading
Investigating Online Application Performance with Login PI

Investigating Online Application Performance with Login PI

As many companies do, we use a CRM system. Recently, I have been getting complaints about our cloud CRM system, Microsoft Dynamics, being slow. I tried to investigate this by shadowing one of our users to see what was wrong. Continue Reading
Login VSI Blog - How-To Update, Protect Against RIDL, Fallout MDS Vulnerability

How-To: Update, Protect Against RIDL, Fallout MDS Vulnerability

RIDL & Fallout MDS vulnerabilities, impact on VDI performance & actions to take. FAQs we’re receiving & updates on performance tests executed to patch flaws Intel calls “Microarchitectural Data Sampling (M.D.S.)” aka: Rogue In-Flight Data Load (RIDL), Fallout, ZombieLoad & Store-to-Leak Forwarding. Continue Reading
Login VSI -Blog Post - IGEL Partner with Login VSI

Login PI & IGEL: Delivering Deep Application Test & Availability Monitoring

Together Login VSI and IGEL deliver deep application test and availability monitoring for the digital workspace This week we announced a partnership with IGEL that enables Login PI integration in a radical new way. Continue Reading
Cookie Settings