From owner-freebsd-stable@FreeBSD.ORG Thu Oct 12 15:37:47 2006 Return-Path: X-Original-To: freebsd-stable@FreeBSD.ORG Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 29A7D16A519 for ; Thu, 12 Oct 2006 15:37:47 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (lurza.secnetix.de [83.120.8.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id AF1AC43D64 for ; Thu, 12 Oct 2006 15:37:39 +0000 (GMT) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (ahevuh@localhost [127.0.0.1]) by lurza.secnetix.de (8.13.4/8.13.4) with ESMTP id k9CFbWaj069897; Thu, 12 Oct 2006 17:37:37 +0200 (CEST) (envelope-from oliver.fromme@secnetix.de) Received: (from olli@localhost) by lurza.secnetix.de (8.13.4/8.13.1/Submit) id k9CFbWpw069896; Thu, 12 Oct 2006 17:37:32 +0200 (CEST) (envelope-from olli) Date: Thu, 12 Oct 2006 17:37:32 +0200 (CEST) Message-Id: <200610121537.k9CFbWpw069896@lurza.secnetix.de> From: Oliver Fromme To: freebsd-stable@FreeBSD.ORG, ohmer@epita.info In-Reply-To: <1160664469.92207.51.camel@moe.cload.net> X-Newsgroups: list.freebsd-stable User-Agent: tin/1.8.2-20060425 ("Shillay") (UNIX) (FreeBSD/4.11-STABLE (i386)) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.1.2 (lurza.secnetix.de [127.0.0.1]); Thu, 12 Oct 2006 17:37:37 +0200 (CEST) Cc: Subject: Re: VIA C7 support X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-stable@FreeBSD.ORG, ohmer@epita.info List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Oct 2006 15:37:47 -0000 Matthieu Michaud wrote: > I rent a small server based on a VIA C7 on which I installed a > 6.2-PRERELEASE as of today (see dmesg and kernconf attached). It runs > fairly well but I wonder if it couldn't be faster. > > According to padlock(4) man page, crypto hardware support is available > by adding padlock, crypto and cryptodev kernel options. I compiled it as > modules. I haven't noticed difference between 'openssl speed' and > 'openssl speed -engine padlock'. I attached results. I don't know if the openssl command really uses the padlock engine. I doubt it. But with scp the throughput doubles when padlock is enabled on my C3 Nehemiah. So it clearly helps scp. (FAST_IPSEC also benefits from it, but I don't use IPSEC so I don't have numbers.) > Finally, I tried to read 16M from /dev/random and /dev/urandom to look > at RNG support. It reads at 2M/s on both device. Comparing to a P4 1.7G > and P4 2.8G, it's few : they both performs around 14M/s on almost as > recent kernel. There's a difference in quality: I doubt that those 16MB that you got in about one second on the P4 were really as random as the 2 MB that you got on the C7. Also take into account that you usually don't read that much data from /dev/random. Quality is much more important than speed. Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd Any opinions expressed in this message may be personal to the author and may not necessarily reflect the opinions of secnetix in any way. "It combines all the worst aspects of C and Lisp: a billion different sublanguages in one monolithic executable. It combines the power of C with the readability of PostScript." -- Jamie Zawinski, when asked: "What's wrong with perl?"