avoid performance penalties from specter & meltdown patches

How can I configure the system so that patches for Specter and Meltdown do not effect the performance. If adding the following kernel parameters help:

pti = off, nospec, spectre_v2=off

Actually one of my customer runs SAP ERP atop SLE servers. SAP ERP is a trusted application and only local and trusted users access the system. Customer is asking me to configure the system so that performance impact could be avoided.

Please help

[QUOTE=sharfuddin;51017]How can I configure the system so that patches for Specter and Meltdown do not effect the performance. If adding the following kernel parameters help:

pti = off, nospec, spectre_v2=off

Actually one of my customer runs SAP ERP atop SLE servers. SAP ERP is a trusted application and only local and trusted users access the system. Customer is asking me to configure the system so that performance impact could be avoided.

Please help[/QUOTE]

https://www.suse.com/support/kb/doc/?id=7022512

Thomas

Yes I went through the https://www.suse.com/support/kb/doc/?id=7022512 and from there I deduced that following kernel parameters would help:

 pti = off, nospec, spectre_v2=off 

I am looking for endorsement; if my understanding is correct ?