OpenSSL with hifn(4) (cryptodev)

Norikatsu Shigemura nork at FreeBSD.org
Tue Aug 3 05:41:37 PDT 2004


Hi sam!

	I have two Soekris vpn1401 crypto accelerator cards.  I installed
	these to 4-stable machine and 5-current machine.

4-stable(FreeBSD sakura.ninth-nine.com 4.10-STABLE FreeBSD 4.10-STABLE #16: Mon Aug  2 20:45:23 JST 2004     nork at sakura.ninth-nine.com:/usr/obj/usr/src/sys/SAKURA  i386)

	hifn0 mem 0xfa100000-0xfa107fff,0xfa108000-0xfa109fff,0xfa10e000-0xfa10efff irq 11 at device 9.0 on pci0
	hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
options		INET			#InterNETworking
options		INET6			#IPv6 communications protocols
#options	FAST_IPSEC		# Fast IPsec
options		IPSEC			#IP security
options		IPSEC_ESP		#IP security (crypto; define w/ IPSEC)
options		IPSEC_DEBUG		#debug for IP security
pseudo-device	crypto			# core crypto support
pseudo-device	cryptodev		# /dev/crypto for access to h/w
device		hifn			# Hifn 7951, 7781, etc.
device		rndtest			# FIPS 140-2 entropy tester
options		HIFN_DEBUG		# enable debugging support: hw.hifn.debug
options		HIFN_RNDTEST		# enable rndtest support
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
5-current(FreeBSD nadesico.ninth-nine.com 5.2-CURRENT FreeBSD 5.2-CURRENT #10: Tue Aug  3 02:18:55 JST 2004     nork at nadesico.ninth-nine.com:/devel/obj/devel/src/sys/NADESICO  i386)

	hifn0 mem 0xf7100000-0xf7107fff,0xf710e000-0xf710ffff,0xf7114000-0xf7114fff irq 16 at device 10.0 on pci0
	hifn0: [GIANT-LOCKED]
	hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
options		INET			#InterNETworking
options		INET6			#IPv6 communications protocols
#options	IPSEC			#IP security
#options	IPSEC_ESP		#IP security (crypto; define w/ IPSEC)
#options	IPSEC_DEBUG		#debug for IP security
options		FAST_IPSEC		#new IPsec (cannot define w/ IPSEC)
device		crypto			# core crypto support
device		cryptodev		# /dev/crypto for access to h/w
device		rndtest			# FIPS 140-2 entropy tester
device		hifn			# Hifn 7951, 7781, etc.
options		HIFN_DEBUG		# enable debugging support: hw.hifn.debug
options		HIFN_RNDTEST		# enable rndtest support
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



	I confirmed `openssl speed -engine cryptodev', but it looks not
	works.  Because 1st: same speed (before/after install it), 2nd: CPU
	loadavg is always high. So I consider that openssl didn't use
	cryptodev.  Do you have any idea?

# If I confirm it looks good, I will enable FAST_IPSEC on 4-stable.


More information about the freebsd-stable mailing list