From owner-freebsd-net  Sun Jul  9 23:36: 3 2000
Delivered-To: freebsd-net@freebsd.org
Received: from lychee.itojun.org (dialup0.itojun.org [210.160.95.108])
	by hub.freebsd.org (Postfix) with ESMTP id 9B9A537B6FC
	for <freebsd-net@FreeBSD.ORG>; Sun,  9 Jul 2000 23:36:00 -0700 (PDT)
	(envelope-from itojun@itojun.org)
Received: from kiwi.itojun.org (localhost [127.0.0.1])
	by itojun.org (8.10.0/3.7W) with ESMTP id e6A6YW401036;
	Mon, 10 Jul 2000 15:34:32 +0900 (JST)
To: "Louis A. Mamakos" <louie@TransSys.COM>
Cc: mike@sentex.net (Mike Tancsa), freebsd-net@FreeBSD.ORG
In-reply-to: louie's message of Sun, 09 Jul 2000 18:21:31 -0400.
      <200007092221.SAA00894@whizzo.transsys.com> 
X-Template-Reply-To: itojun@itojun.org
X-Template-Return-Receipt-To: itojun@itojun.org
X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD  90 5F B4 60 79 54 16 E2
Subject: Re: Hardware crypto (Re: KAME stable 20000704) 
From: Jun-ichiro itojun Hagino <itojun@iijlab.net>
Date: Mon, 10 Jul 2000 15:34:32 +0900
Message-ID: <1034.963210872@localhost>
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

>Note that their drivers export a user-mode device, which might be usable
>for TLS/SSL hardware assist, isn't applicable for IPSEC assist.  See the
>OpenBSD driver for software that addresses that need.
>
>That being said, the folks that sell the powercrypt board have been very
>helpful and supportive to folks using their products on UNIX platforms. 
>I've been very pleased in my interactions with them.

	In case anyone got confused: please note that "IPsec support for
	crypto card" and "crypto card support as user-mode device file"
	are totally different thing.  Former one needs MAJOR work in
	network IP layer design (BSD IP layer runs under software interrupt,
	killing possibility for offloading CPU).  OpenBSD did a truely
	super job on this.

itojun


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message