From owner-freebsd-stable Mon Feb 24 12: 7:47 2003 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9331037B401 for ; Mon, 24 Feb 2003 12:07:45 -0800 (PST) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id C337C43F85 for ; Mon, 24 Feb 2003 12:07:44 -0800 (PST) (envelope-from mike@sentex.net) Received: from simian.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.12.7/8.12.7) with ESMTP id h1OK7WpG039096; Mon, 24 Feb 2003 15:07:35 -0500 (EST) (envelope-from mike@sentex.net) Message-Id: <5.2.0.9.0.20030224145408.05edb800@marble.sentex.ca> X-Sender: mdtpop@marble.sentex.ca (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9 Date: Mon, 24 Feb 2003 15:12:33 -0500 To: freebsd-stable@FreeBSD.ORG From: Mike Tancsa Subject: Re: HEADS UP: OpenSSL 0.9.7 in -STABLE In-Reply-To: <20030214223844.GA96059@madman.celabo.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Virus-Scanned: By Sentex Communications (lava/20020517) Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi all, Is anyone trying to use a hardware accelerator in STABLE ? dmesg shows hifn0 mem 0xfa000000-0xfa000fff,0xfa800000-0xfa800fff irq 12 at device 15.0 on pci0 hifn0: Hifn 7951, rev 0, 128KB sram, 193 sessions Yet, when doing some ssh tests, I see approximately the same load average when blasting across a stream of data via ssh (using 3des) with the card and without. I would have thought there would be some noticeable difference? I have a large backup server that processes numerous dumps piped via ssh. I thought this would be a good test box to see how effective the card might be. I have # ls -l /dev/crypto crw-rw-rw- 1 root operator 70, 0 Feb 24 11:16 /dev/crypto and I have device crypto device hifn in the kernel. However, when I look through the NEWS file, there does not seem to be specific mention of the HiFn ? Is there anything special I need to do in order to build the lib to use the hardware accelerator ? Also the man page for the HiFn states, The Hifn 7951 and Hifn 7811 will also supply data to the kernel random(4) subsystem. Do I need to tell rndcontrol about it ? I do see the following additional kernel mibs # sysctl -x -A | grep -i cryp kern.usercrypto: 1 kern.userasymcrypto: 1 kern.cryptodevallowsoft: 0 kern.crypto_stats: Format:S,cryptostats Length:144 Dump:0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 cryptodesc: 64, 0, 0, 0, 0 cryptop: 64, 0, 0, 0, 0 debug.crypto_timing: 0 Also, on a similar note, should not the FAST_IPSEC be documented or at least mentioned in LINT ? Thanks, ---Mike At 04:38 PM 14/02/2003 -0600, Jacques A. Vidrine wrote: >This new version of OpenSSL includes support for BSD cryptodev, so >that you can offload processing to a supported crypto card (see the >crypto(4) man page). There are a host of other improvements as well. >See src/crypto/openssl/NEWS. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message