FreeBSD + Rainbow Cryptoswift

[Rumen Telbizov]

Thank for the reply Mike.

I took a look at those cards (vpn1201 and vpn1211).
They don't seem to have AES support and only support
2-8 RSA connections/sec. Rainbow say that their cards
support 1000 RSA connections/sec which is quite astonishing.
The vpn1401 and vpn1411 seem to have better performance but
as you said the hifn(4) driver support is broken for those :(

Anyway it would be interesting for me if you share your
opinion about the performance you gained from those (1201 - 1211)
cards in comparison to the software computations. 
It would be nice if tell me how much did you pay for these
cards because there are no prices on the site!

I read in a mailing list that the Rainbow's card (cryptoswift)
is 1000 GBP.

An interesing topic is if this performance could be gained
with an smp machine (say 2-4 xeons + lots of RAM) instead
of paying 1000 GBP for a card.

I am still new in this research but there are no representatives
in my country nor there are prices on the vendors' sites and
I cannot make any comparison.

I would greatly appreciate all your hints.

Rumen Telbizov



On Mon, Jan 26, 2004 at 07:57:12AM -0500, Mike Tancsa wrote:
> 
> I dont know about the card you mention below, but the ones specifically 
> mentioned in the man pages are
> 
> safe (4)
> ubsec (4)
> hifn (4)
> 
> We have used HiFn 7951 based cards with really great results for IPSEC and 
> ssh acceleration.  We bought the cards from www.soekris.com (VPN1201 and 
> VPN1211). The new card, the vpn1401 looks promising, but the drivers are 
> broken right now so I would stay away from it and cards based on that chip.
> 
>         ---Mike
> 
> At 04:14 AM 26/01/2004, Rumen Telbizov wrote:
> >Dear List,
> >
> >I would like to know if anyone has installed one of those
> >Rainbow CryptoSwift  PCI, SSL accelerators under FreeBSD?
> >I was looking in the LINT file about the support of those
> >cards but couldn't find anything.
> >As far as I know there should be a kld (or in-kernel) support for
> >those and some sort of integration between openssl and the
> >card.
> >My configuration is: FreeBSD 4.9-STABLE, Apache 1.3+mod_ssl
> >and openssl!
> >
> >Thank you in advance.
> >
> >P.S.
> >If you have any experience with any other cards (non Rainbow)
> >I would appreciate if you share your opinion.
> >_______________________________________________
> >freebsd-stable at freebsd.org mailing list
> >http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> >To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
> 
>