OpenSSL with hifn(4) (cryptodev)
sam at errno.com
Tue Aug 3 13:20:46 PDT 2004
On Tuesday 03 August 2004 11:16 am, Doug White wrote:
> On Tue, 3 Aug 2004, Mike Tancsa wrote:
> > At 08:41 AM 03/08/2004, Norikatsu Shigemura wrote:
> > >Hi sam!
> > >
> > > I have two Soekris vpn1401 crypto accelerator cards. I
> > > installed these to 4-stable machine and 5-current machine.
> > Hi,
> > Not all things are accelerated in openssl. Also depending on
> > the CPU you use, it wont be faster and might even be slower. Where you
> > really win is with concurrent jobs. In our app, our backup server takes
> > several ssh streams of dump and tar. The P4 2.4 keeps up just fine even
> > when 50Mb/s of traffic is coming in with the card, but is too taxed
> > without it.
> Also, your app has to ask for the acceleration if they want it, by
> requesting the 'cryptodev' engine. And that requires OpenSSL 0.9.7, which
> you probably have since the 'openssl engine' command exists.
> nork, which app(s) are you trying to accelerate?
I don't believe this is correct. Unless something has changed libcrypto (from
openssl) will check for /dev/crypto, query what algorithms are supported, and
then use h/w acceleration if it exists.
More information about the freebsd-current