From owner-freebsd-security@FreeBSD.ORG Thu Apr 8 21:41:34 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E92CD16A4CE for ; Thu, 8 Apr 2004 21:41:34 -0700 (PDT) Received: from phobos.osem.com (phobos.osem.com [66.92.67.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9E6A343D1D for ; Thu, 8 Apr 2004 21:41:34 -0700 (PDT) (envelope-from andy@lewman.com) Received: by phobos.osem.com (Postfix, from userid 1001) id 1EF4F29D; Fri, 9 Apr 2004 00:41:34 -0400 (EDT) Date: Fri, 9 Apr 2004 00:41:34 -0400 From: andy@lewman.com To: security@freebsd.org Message-ID: <20040409044134.GA40379@phobos.osem.com> References: <26486.1081437513@critter.freebsd.dk> <6.0.3.0.0.20040408112048.07218a00@209.112.4.2> <3009DCC4-8986-11D8-88D0-003065ABFD92@mac.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3009DCC4-8986-11D8-88D0-003065ABFD92@mac.com> User-Agent: Mutt/1.4.2.1i X-phase_of_moon: The Moon is Waning Gibbous (82% of Full) Subject: Re: recommended SSL-friendly crypto accelerator X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Apr 2004 04:41:35 -0000 In my completely unscientific tests just now before heading off to bed, The 4.9 kernel without hifn in it, apache-ssl is clearly using main cpu under artificial heavy load. Put back in hifn, same test, cpu is hovering at 90% idle, and apache-ssl is cranking away. This is with the Soekris 14xx card, reported as: hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions I know the 7955 is the latest chipset and supports more than the older 7951 cards. : : I can second/confirm Mike's observations here. : : I've got a pair of HI/FN 7951 cards which gets used by SSH if I select : 3DES, but there is no sign that Apache attempts to use it for either : the public-key RSA/DSA crypto during HTTPS session startup, nor later : for the symmetric crypto. : : -- : -Chuck : : _______________________________________________ -- Andrew