From owner-freebsd-stable@FreeBSD.ORG Fri Oct 20 21:05:52 2006 Return-Path: X-Original-To: freebsd-stable@FreeBSD.ORG Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8A3B816A415 for ; Fri, 20 Oct 2006 21:05:52 +0000 (UTC) (envelope-from matthieu.michaud@epita.info) Received: from marge.cload.net (marge.cload.net [88.191.31.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id A272743D45 for ; Fri, 20 Oct 2006 21:05:50 +0000 (GMT) (envelope-from matthieu.michaud@epita.info) Received: (qmail 7175 invoked from network); 20 Oct 2006 21:05:49 -0000 Received: from unknown (HELO ?192.168.2.16?) (192.168.2.16) by 0 with ESMTP; 20 Oct 2006 21:05:49 -0000 Message-ID: <45393A29.3080100@epita.info> Date: Fri, 20 Oct 2006 23:05:45 +0200 From: Matthieu Michaud User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: freebsd-stable@FreeBSD.ORG, olli@lurza.secnetix.de References: <200610121537.k9CFbWpw069896@lurza.secnetix.de> In-Reply-To: <200610121537.k9CFbWpw069896@lurza.secnetix.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: Subject: Re: VIA C7 support X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2006 21:05:52 -0000 Oliver Fromme a écrit : > Matthieu Michaud wrote: > > I rent a small server based on a VIA C7 on which I installed a > > 6.2-PRERELEASE as of today (see dmesg and kernconf attached). It runs > > fairly well but I wonder if it couldn't be faster. > > > > According to padlock(4) man page, crypto hardware support is available > > by adding padlock, crypto and cryptodev kernel options. I compiled it as > > modules. I haven't noticed difference between 'openssl speed' and > > 'openssl speed -engine padlock'. I attached results. > > I don't know if the openssl command really uses the padlock > engine. I doubt it. > > But with scp the throughput doubles when padlock is enabled > on my C3 Nehemiah. So it clearly helps scp. (FAST_IPSEC > also benefits from it, but I don't use IPSEC so I don't > have numbers.) some basic scp over large file showed it :) > > Finally, I tried to read 16M from /dev/random and /dev/urandom to look > > at RNG support. It reads at 2M/s on both device. Comparing to a P4 1.7G > > and P4 2.8G, it's few : they both performs around 14M/s on almost as > > recent kernel. > > There's a difference in quality: I doubt that those 16MB > that you got in about one second on the P4 were really > as random as the 2 MB that you got on the C7. > > Also take into account that you usually don't read that > much data from /dev/random. Quality is much more important > than speed. you are right. do you know an easy way to evaluate this quality ?