Date: Thu, 9 Aug 2018 08:37:04 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: "David P. Discher" <dpd@dpdtech.com>, freebsd-net@freebsd.org Subject: Re: Is if_ipsec/ipsec - AESNI accelerated ? Message-ID: <dc8bea35-1770-48d0-3662-c58e72bd3d2d@yandex.ru> In-Reply-To: <D47976AF-A0AF-4A58-B80E-31E9DED96D26@dpdtech.com> References: <D47976AF-A0AF-4A58-B80E-31E9DED96D26@dpdtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Uf2Hhj2k6cBpKr8PtEMawmb8aBllDHAAG Content-Type: multipart/mixed; boundary="eLsGDHc7TdApySAvFeZAV7FG48CkFICad"; protected-headers="v1" From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: "David P. Discher" <dpd@dpdtech.com>, freebsd-net@freebsd.org Message-ID: <dc8bea35-1770-48d0-3662-c58e72bd3d2d@yandex.ru> Subject: Re: Is if_ipsec/ipsec - AESNI accelerated ? References: <D47976AF-A0AF-4A58-B80E-31E9DED96D26@dpdtech.com> In-Reply-To: <D47976AF-A0AF-4A58-B80E-31E9DED96D26@dpdtech.com> --eLsGDHc7TdApySAvFeZAV7FG48CkFICad Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 09.08.2018 06:57, David P. Discher wrote: > I=E2=80=99m suspecting that IPSec in FreeBSD is not leveraging AESNI on= Intel. Is this correct ? IPsec uses crypto(9) framework that works by default without any acceleration. You need to load aesni(4) kernel module to enable acceleration. Also, you need to recreate security associations after module loading to take effect. --=20 WBR, Andrey V. Elsukov --eLsGDHc7TdApySAvFeZAV7FG48CkFICad-- --Uf2Hhj2k6cBpKr8PtEMawmb8aBllDHAAG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAltr0wAACgkQAcXqBBDI oXp/bgf8D3YGjRMylF0OfpgfQPSZDbfR7VS7pe0fdeqgXIiqZa1jwqPBr3bPGbrR JQLWTHpWLE1NRsCZT5qRSIKwBeqggLpiDDWmK6YGf4jqHqs3X8RMQFi+eK/L+dUV XR+IShei/yOGJDwBNzk+3bLa2FWyyQDkG05rqva500gaSX3I/OBmHM0EVQ+e4hYp 0zF11UraSouM3H2sXgu2k9eL/QrvjOF3ytbN0hjnqhgJD3ulhh0JhHxVjg6TVVAC xSFPWHCLwez1IsGrYvMIhjIRBMBFQ1XeZRXjOkWSthjtzBU5MLGK4S7iIHZRi7qh Qa/KopyWh7LzkfU591vBLLMb8X59Pw== =C0+G -----END PGP SIGNATURE----- --Uf2Hhj2k6cBpKr8PtEMawmb8aBllDHAAG--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?dc8bea35-1770-48d0-3662-c58e72bd3d2d>