seeking current supported crypto co-processors

[Ivan Voras]

On 09/03/10 02:35, Ricky Charlet wrote:
> Howdy,
>     <this messages is cross posted in freebsd-security and freebsd-net>
>
>          I'm seeking current cryptographic coprocessors supported in FreeBSD 8.x.  By perusing through the crypto-dev (and subsequently referenced) man page(s) I found this list:
> Hifn 7751/7951/7811/7955/7956 crypto accelerator
> SafeNet 1141/1741
> Bluesteel 5501/5601
> Broadcom bcm5801/5802/5805/5820/5821/5822/5823/5825
>
>          Those are all pretty old (and in some cases, no longer existent). I'm surveying these lists to see if anyone knows of more modern chips working with FreeBSD 8.x. Or if you feel some chip on the list above is up to the task of near about 1 Gb throughput across a PCIe and has friendly vendor support for FreeBSD, I'd sure like to hear about that too.
>

I'm not saying they are useless but are you really sure you need them? 
Even on the last generation of CPUs without AES instructions you can 
easily get 125 MB/s of AES-128 encryption and 300 MB/s of RC4 per CPU 
core, so even one core can saturate a 1 Gbit/s link. You can setup a 
cheap box to be a SSL proxy in front of the real web servers to offload SSL.