News

Intel Warns of Server Lags from Meltdown and Spectre Fixes

Intel's efforts to patch its CPUs in the wake of the Meltdown and Spectre security attacks could bog down servers, the company warned recently.

In an announcement Wednesday, Navin Shenoy, executive vice president and general manager of Intel's Data Center Group, said that Intel has now issued firmware updates for "90 percent of Intel CPUs introduced in the past five years." That puts Intel on track to meet its goal of patching all of its CPUs produced in the past five years by the end of January. Its next plan is to issue firmware updates for older Intel chips.

Intel is still looking into a reboot problem that it earlier indicated may have affected "a few customers" using Broadwell or Haswell CPUs after they applied Intel's firmware fixes. The reboot issue, though, is also affecting other Intel CPUs, Shenoy noted this week:

As part of this, we have determined that similar [reboot] behavior occurs on other products in some configurations, including Ivy Bridge-, Sandy Bridge-, Skylake-, and Kaby Lake-based platforms. We have reproduced these issues internally and are making progress toward identifying the root cause. In parallel, we will be providing beta microcode to vendors for validation by next week.

Typically, Intel provides its firmware updates to its OEM computer-maker partners for testing before those updates become available to the public via the OEM. Operating system makers also are releasing patches to address the threats, and both types of patches should be applied. The problems affect both Windows- and Linux-based machines, including Apple products.

Intel this week also talked about the performance slowdown effects that likely will result after applying updates to address the Meltdown and Spectre attack methods. Shenoy particularly focused on Intel's server slowdown findings.

Intel's server test results used the 25 Intel Xeon Platinum 81xx Series, which appears to be one of Intel's higher-end server CPUs. This "Skylake" processor-based CPU is part of the Xeon Scalable line, with support for 28 cores, and is priced in the $10,000 range, according to an Intel spec sheet.

The firmware updates resulted in the following server performance effects, according to Intel:

  • 0 percent to 2 percent slowdown for "industry-standard measures of integer and floating point throughput, Linpack, STREAM, server-side Java and energy efficiency benchmarks," which mostly applies to "enterprise and cloud customers."

  • 4 percent slowdown for "an online transaction processing (OLTP) benchmark."

  • 18 percent throughput decrease for the "FlexibleIO" storage benchmark when the CPU was stressed at 100 percent (it just showed a 2 percent slowdown effect with "a 70/30 read/write model").

  • Up to 25 percent slowdown on its "Storage Performance Development Kit (SPDK) tests" for iSCSI using a single core, but there was no slowdown effect using "SPDK vHost."

Intel has repeatedly advised that the performance slowdowns from the updates will vary depending on the workloads that are run. The company is currently working with its partners to produce "other mitigations options that could yield less impact," Shenoy indicated.

Last week, Microsoft confirmed the system slowdowns from the Meltdown and Spectre patches and also indicated that a "more significant performance impact" would occur for server workloads.

Intel has tended to downplay the slowdown effects from firmware patches ever since the Meltdown and Spectre problems came into the public sphere earlier this month. In announcement last week regarding client effects, Intel contended that "we expected our performance impact should not be significant for average computer users" after its updates get applied to PCs using Intel Core processors.

On the client side, Intel reported seeing a 6 percent slowdown on Windows 7 machines using Intel sixth-generation processors, based on the SYSMark2014SE benchmark. A similar 6 percent result was seen with eighth-generation Intel chips, Intel reported.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Broadcom Revamps VMware Partner Program Again

    Broadcom recently announced a significant update regarding its VMware Cloud Service Provider (VCSP) program, coinciding with the release of VMware Cloud Foundation (VCF) 9.0, a key component in Broadcom’s private cloud strategy.

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.