Date: Tue, 3 Aug 2004 13:20:17 -0700 From: Sam Leffler <sam@errno.com> To: freebsd-current@freebsd.org Cc: Mike Tancsa <mike@sentex.net> Subject: Re: OpenSSL with hifn(4) (cryptodev) Message-ID: <200408031320.17076.sam@errno.com> In-Reply-To: <20040803111428.S15648@carver.gumbysoft.com> References: <20040803214133.31dd9b03.nork@FreeBSD.org> <6.1.2.0.0.20040803092531.08ffed10@64.7.153.2> <20040803111428.S15648@carver.gumbysoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 03 August 2004 11:16 am, Doug White wrote: > On Tue, 3 Aug 2004, Mike Tancsa wrote: > > At 08:41 AM 03/08/2004, Norikatsu Shigemura wrote: > > >Hi sam! > > > > > > I have two Soekris vpn1401 crypto accelerator cards. I > > > installed these to 4-stable machine and 5-current machine. > > > > Hi, > > Not all things are accelerated in openssl. Also depending on > > the CPU you use, it wont be faster and might even be slower. Where you > > really win is with concurrent jobs. In our app, our backup server takes > > several ssh streams of dump and tar. The P4 2.4 keeps up just fine even > > when 50Mb/s of traffic is coming in with the card, but is too taxed > > without it. > > Also, your app has to ask for the acceleration if they want it, by > requesting the 'cryptodev' engine. And that requires OpenSSL 0.9.7, which > you probably have since the 'openssl engine' command exists. > > nork, which app(s) are you trying to accelerate? I don't believe this is correct. Unless something has changed libcrypto (from openssl) will check for /dev/crypto, query what algorithms are supported, and then use h/w acceleration if it exists. Sam
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200408031320.17076.sam>