SMB multiprocessing signing in 7mode

Dong_Chen — Wed, 04 Jun 2025 21:21:18 GMT

Hi,

I have a question in SMB2 signing in 7mode

Find some docs is as bellow.

The SMB 2.x MP signing feature is enabled in the default operating mode of the following versions of Data ONTAP in 7-Mode:

Data ONTAP 8.1.4, 8.1.4P1, and 8.1.4P2.
Data ONTAP 8.2.1.

Due to a software defect (refer to BUG 817844), the feature is disabled in its default-operating mode through BUG 823143 for the following releases:

Data ONTAP 8.1.4P3 and later versions of 8.1 releases.
Data ONTAP 8.2.1P1 and later versions of 8.2 releases.

So, In my two filers, In DOT814P2, MP signing is enabled by default. I cannot config it since there is no option? How to do it if I met some signing performance problem?

nyr98npnp2> version
NetApp Release 8.1.4P2 7-Mode: Sun Apr 13 00:25:56 PDT 2014
nyr98npnp2> options cifs.smb2
cifs.smb2.enable             on
cifs.smb2.signing.required   off
cifs.smb2_1.branch_cache.enable off
cifs.smb2_1.branch_cache.hash_time_out 3600       (value might be overwritten in takeover)
nyr98npnp2>

In the other filer, the MP signing is default. What is the default mean?

nyr98npnp1> version
NetApp Release 8.1.4P9 7-Mode: Thu Jul 16 02:12:52 PDT 2015

nyr98npnp1> options cifs.smb2
cifs.smb2.enable             on
cifs.smb2.signing.multiprocessing default
cifs.smb2.signing.required   off
cifs.smb2_1.branch_cache.enable off
cifs.smb2_1.branch_cache.hash_time_out 3600       (value might be overwritten in takeover)
nyr98npnp1>

Re: SMB multiprocessing signing in 7mode

SeanHatfield — Tue, 19 Apr 2016 06:36:32 GMT

In affected releases prior to the introduction of the option "cifs.smb2.signing.multiprocessing" there is an internal workaround available to customers via support.

In releases that have the options "cifs.smb2.signing.multiprocessing" there are 3 states. default, enabled, and disabled.

default=use whatever the default is for that ontap release. Signifies it has not specifically been set by the customer.

enabled/disabled=user specified operating modes.

Or like it says in the man page:

       cifs.smb2.signing.multiprocessing
           This option controls the SMB2  multiprocessor  signing
           optimization  feature.  If  this option is enabled, it
           allows CIFS to use multiple CPUs available in the con-
           troller to compute and verify SMB2 security signature.
           Enabling this feature  may  improve  CIFS  performance
           when  SMB2  protocol with security signature verifica-
           tion is used. If this option is set to  "default"  the
           feature  is  enabled or disabled depending on the Data
           ONTAP version. The "cifs stat" command  shows  whether
           SMB2 multiprocessor signing is enabled or disabled and
           the system default value.

           Default: default

           Values: default, enabled, disabled

           Effective: Immediately

           Persistence: Remains in effect across system reboots

topic Re: SMB multiprocessing signing in 7mode in Network and Storage Protocols

SMB multiprocessing signing in 7mode

Re: SMB multiprocessing signing in 7mode