From owner-freebsd-hackers@FreeBSD.ORG  Wed May 21 23:58:04 2008
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3DF1D106564A
	for <freebsd-hackers@freebsd.org>; Wed, 21 May 2008 23:58:04 +0000 (UTC)
	(envelope-from mike@sentex.net)
Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [64.7.153.18])
	by mx1.freebsd.org (Postfix) with ESMTP id 0F4E58FC15
	for <freebsd-hackers@freebsd.org>; Wed, 21 May 2008 23:58:03 +0000 (UTC)
	(envelope-from mike@sentex.net)
Received: from Mobile2.sentex.ca (cage.simianscience.com [64.7.134.1])
	by smarthost1.sentex.ca (8.14.2/8.14.2) with SMTP id m4LNkcUK069657;
	Wed, 21 May 2008 19:46:38 -0400 (EDT) (envelope-from mike@sentex.net)
From: mike@sentex.net
To: "Richard van Mansom" <richard@vanmansom.net>
Date: Wed, 21 May 2008 19:47:11 -0400
Message-ID: <sjc934digcn8o7tneu96rpbib7de7u8tpg@4ax.com>
References: <001001c8bb66$c4713170$4d539450$@net>
In-Reply-To: <001001c8bb66$c4713170$4d539450$@net>
X-Mailer: Forte Agent 4.2/32.1118
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Cc: freebsd-hackers@freebsd.org
Subject: Re: Hifn 7955 doesn't work with Freebsd 7.0-release
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 May 2008 23:58:04 -0000

>
>I tested with openvpn (the one release with pkg_add). I used the default
>cipher (I think this is BF-CBC - Blowfish 128 bit). The VPN works but I

Hi,
See the man page for supported ciphers. =20

>didn't notice any difference in performance (with or without the crypto
>card).=20
>I also tested the crypto card with AES128 but the performance only got =
worse
>(didn't have a baseline for that one)

=46or single crypto streams, you are not going to see any improvement
really.  Where it works, is when you have multiple connections.  e.g.
on our old backup server, we would have several dumps coming in over
ssh (3des) and the card made a significant reduction in CPU usage.  It
doesnt really improve single crypto streams performance wise.

You can also confirm its working by using hifnstats in
/usr/src/tools/tools/

	---Mike