From owner-freebsd-stable@FreeBSD.ORG Tue Aug 3 12:41:36 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E817116A4CE; Tue, 3 Aug 2004 12:41:36 +0000 (GMT) Received: from sakura.ninth-nine.com (sakura.ninth-nine.com [219.127.74.120]) by mx1.FreeBSD.org (Postfix) with ESMTP id 550A343D46; Tue, 3 Aug 2004 12:41:36 +0000 (GMT) (envelope-from nork@FreeBSD.org) Received: from melfina.ninth-nine.com ([IPv6:2002:d312:f91e::1]) (authenticated bits=0) by sakura.ninth-nine.com (8.12.11/8.12.11/NinthNine) with ESMTP id i73CfYaO000705; Tue, 3 Aug 2004 21:41:34 +0900 (JST) (envelope-from nork@FreeBSD.org) Date: Tue, 3 Aug 2004 21:41:33 +0900 From: Norikatsu Shigemura To: sam@FreeBSD.org Message-Id: <20040803214133.31dd9b03.nork@FreeBSD.org> X-Mailer: Sylpheed version 0.9.12-gtk2-20040622 (GTK+ 2.4.4; i386-portbld-freebsd5.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Greylist: Sender succeded SMTP AUTH authentication, not delayed by milter-greylist-1.5.3 (sakura.ninth-nine.com [IPv6:2002:db7f:4a79::1]); Tue, 03 Aug 2004 21:41:34 +0900 (JST) cc: freebsd-current@FreeBSD.org cc: freebsd-stable@FreeBSD.org Subject: OpenSSL with hifn(4) (cryptodev) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Aug 2004 12:41:37 -0000 Hi sam! I have two Soekris vpn1401 crypto accelerator cards. I installed these to 4-stable machine and 5-current machine. 4-stable(FreeBSD sakura.ninth-nine.com 4.10-STABLE FreeBSD 4.10-STABLE #16: Mon Aug 2 20:45:23 JST 2004 nork@sakura.ninth-nine.com:/usr/obj/usr/src/sys/SAKURA i386) hifn0 mem 0xfa100000-0xfa107fff,0xfa108000-0xfa109fff,0xfa10e000-0xfa10efff irq 11 at device 9.0 on pci0 hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - options INET #InterNETworking options INET6 #IPv6 communications protocols #options FAST_IPSEC # Fast IPsec options IPSEC #IP security options IPSEC_ESP #IP security (crypto; define w/ IPSEC) options IPSEC_DEBUG #debug for IP security pseudo-device crypto # core crypto support pseudo-device cryptodev # /dev/crypto for access to h/w device hifn # Hifn 7951, 7781, etc. device rndtest # FIPS 140-2 entropy tester options HIFN_DEBUG # enable debugging support: hw.hifn.debug options HIFN_RNDTEST # enable rndtest support - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 5-current(FreeBSD nadesico.ninth-nine.com 5.2-CURRENT FreeBSD 5.2-CURRENT #10: Tue Aug 3 02:18:55 JST 2004 nork@nadesico.ninth-nine.com:/devel/obj/devel/src/sys/NADESICO i386) hifn0 mem 0xf7100000-0xf7107fff,0xf710e000-0xf710ffff,0xf7114000-0xf7114fff irq 16 at device 10.0 on pci0 hifn0: [GIANT-LOCKED] hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - options INET #InterNETworking options INET6 #IPv6 communications protocols #options IPSEC #IP security #options IPSEC_ESP #IP security (crypto; define w/ IPSEC) #options IPSEC_DEBUG #debug for IP security options FAST_IPSEC #new IPsec (cannot define w/ IPSEC) device crypto # core crypto support device cryptodev # /dev/crypto for access to h/w device rndtest # FIPS 140-2 entropy tester device hifn # Hifn 7951, 7781, etc. options HIFN_DEBUG # enable debugging support: hw.hifn.debug options HIFN_RNDTEST # enable rndtest support - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - I confirmed `openssl speed -engine cryptodev', but it looks not works. Because 1st: same speed (before/after install it), 2nd: CPU loadavg is always high. So I consider that openssl didn't use cryptodev. Do you have any idea? # If I confirm it looks good, I will enable FAST_IPSEC on 4-stable.