When a virtual machine Linux host server is non-Internet facing and is used exclusively on a LAN and is using a relatively well tested distribution like Proxmox, how dangerous would it be to turn off all vulnerability mitigations via the kernel arg
Additionally, has anyone tested what kinds of performance gains might be seen by turning off all such mitigations?
This recently came to be a question for me when I saw this big hit that the
retbleed mitigations create: https://www.phoronix.com/review/retbleed-benchmark
This line of thought extended to the curiosity of what may be the ramifications - both ill and positive - of removing all or some mitigations either via the above kernel argument or by individually turning off high-impact mitigations.