Date: Tue, 3 Aug 2004 21:41:33 +0900 From: Norikatsu Shigemura <nork@FreeBSD.org> To: sam@FreeBSD.org Cc: freebsd-stable@FreeBSD.org Subject: OpenSSL with hifn(4) (cryptodev) Message-ID: <20040803214133.31dd9b03.nork@FreeBSD.org>
next in thread | raw e-mail | index | archive | help
Hi sam! I have two Soekris vpn1401 crypto accelerator cards. I installed these to 4-stable machine and 5-current machine. 4-stable(FreeBSD sakura.ninth-nine.com 4.10-STABLE FreeBSD 4.10-STABLE #16: Mon Aug 2 20:45:23 JST 2004 nork@sakura.ninth-nine.com:/usr/obj/usr/src/sys/SAKURA i386) hifn0 mem 0xfa100000-0xfa107fff,0xfa108000-0xfa109fff,0xfa10e000-0xfa10efff irq 11 at device 9.0 on pci0 hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - options INET #InterNETworking options INET6 #IPv6 communications protocols #options FAST_IPSEC # Fast IPsec options IPSEC #IP security options IPSEC_ESP #IP security (crypto; define w/ IPSEC) options IPSEC_DEBUG #debug for IP security pseudo-device crypto # core crypto support pseudo-device cryptodev # /dev/crypto for access to h/w device hifn # Hifn 7951, 7781, etc. device rndtest # FIPS 140-2 entropy tester options HIFN_DEBUG # enable debugging support: hw.hifn.debug options HIFN_RNDTEST # enable rndtest support - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 5-current(FreeBSD nadesico.ninth-nine.com 5.2-CURRENT FreeBSD 5.2-CURRENT #10: Tue Aug 3 02:18:55 JST 2004 nork@nadesico.ninth-nine.com:/devel/obj/devel/src/sys/NADESICO i386) hifn0 mem 0xf7100000-0xf7107fff,0xf710e000-0xf710ffff,0xf7114000-0xf7114fff irq 16 at device 10.0 on pci0 hifn0: [GIANT-LOCKED] hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - options INET #InterNETworking options INET6 #IPv6 communications protocols #options IPSEC #IP security #options IPSEC_ESP #IP security (crypto; define w/ IPSEC) #options IPSEC_DEBUG #debug for IP security options FAST_IPSEC #new IPsec (cannot define w/ IPSEC) device crypto # core crypto support device cryptodev # /dev/crypto for access to h/w device rndtest # FIPS 140-2 entropy tester device hifn # Hifn 7951, 7781, etc. options HIFN_DEBUG # enable debugging support: hw.hifn.debug options HIFN_RNDTEST # enable rndtest support - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - I confirmed `openssl speed -engine cryptodev', but it looks not works. Because 1st: same speed (before/after install it), 2nd: CPU loadavg is always high. So I consider that openssl didn't use cryptodev. Do you have any idea? # If I confirm it looks good, I will enable FAST_IPSEC on 4-stable.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040803214133.31dd9b03.nork>