From owner-freebsd-stable@FreeBSD.ORG Mon Jan 26 10:36:44 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4151416A4D6 for ; Mon, 26 Jan 2004 10:36:44 -0800 (PST) Received: from smtp3.sentex.ca (smtp3.sentex.ca [64.7.153.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id CBB5743D1F for ; Mon, 26 Jan 2004 10:36:42 -0800 (PST) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smtp3.sentex.ca (8.12.10/8.12.10) with ESMTP id i0QIaXUE028240; Mon, 26 Jan 2004 13:36:33 -0500 (EST) (envelope-from mike@sentex.net) Received: from simian.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.12.9p2/8.12.9) with ESMTP id i0QIaYNq003576; Mon, 26 Jan 2004 13:36:34 -0500 (EST) (envelope-from mike@sentex.net) Message-Id: <6.0.1.1.0.20040126133001.03407760@209.112.4.2> X-Sender: mdtpop@209.112.4.2 (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 6.0.1.1 Date: Mon, 26 Jan 2004 13:35:25 -0500 To: Rumen Telbizov From: Mike Tancsa In-Reply-To: <20040126153430.GA230@e-card.bg> References: <20040126091424.GI688@e-card.bg> <6.0.1.1.0.20040126074335.04528dc8@209.112.4.2> <20040126153430.GA230@e-card.bg> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Virus-Scanned: by amavisd-new cc: stable@freebsd.org Subject: Re: FreeBSD + Rainbow Cryptoswift X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Jan 2004 18:36:44 -0000 At 10:34 AM 26/01/2004, Rumen Telbizov wrote: >Thank for the reply Mike. > >I took a look at those cards (vpn1201 and vpn1211). >They don't seem to have AES support and only support >2-8 RSA connections/sec. Check the man pages to see what is actually supported. The chip might do XX but the drivers might not do what you want. I repeat, check the man pages :-) >Rainbow say that their cards >support 1000 RSA connections/sec which is quite astonishing. But is there FreeBSD support ? >Anyway it would be interesting for me if you share your >opinion about the performance you gained from those (1201 - 1211) >cards in comparison to the software computations. >It would be nice if tell me how much did you pay for these >cards because there are no prices on the site! The prices are on the site http://www.soekris.com/how_to_buy.htm >I read in a mailing list that the Rainbow's card (cryptoswift) >is 1000 GBP. The 1201 is $79USD vs $1,800USD for the above card. >An interesing topic is if this performance could be gained >with an smp machine (say 2-4 xeons + lots of RAM) instead >of paying 1000 GBP for a card. Apart from a number of soekris boxes with the 1211s, I have a number of backup servers that take dumps and tar files over ssh. For me, using 3des ssh over offloaded onto the HiFn card keeps the load average quite low on the target server so I dont have to worry about scheduling issues. ---Mike