From owner-freebsd-security@FreeBSD.ORG Wed Apr 14 20:03:20 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C927D16A4CE for ; Wed, 14 Apr 2004 20:03:20 -0700 (PDT) Received: from phobos.osem.com (phobos.osem.com [66.92.67.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7997243D53 for ; Wed, 14 Apr 2004 20:03:20 -0700 (PDT) (envelope-from andy@lewman.com) Received: by phobos.osem.com (Postfix, from userid 1001) id EC26629D; Wed, 14 Apr 2004 23:03:19 -0400 (EDT) Date: Wed, 14 Apr 2004 23:03:19 -0400 From: andy@lewman.com To: security@freebsd.org Message-ID: <20040415030319.GA71038@phobos.osem.com> References: <20040408144322.GA83448@bewilderbeast.blackhelicopters.org> <26486.1081437513@critter.freebsd.dk> <20040413181943.GA55219@bewilderbeast.blackhelicopters.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040413181943.GA55219@bewilderbeast.blackhelicopters.org> User-Agent: Mutt/1.4.2.1i X-phase_of_moon: The Moon is Waning Crescent (20% of Full) Subject: Re: recommended SSL-friendly crypto accelerator X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Apr 2004 03:03:20 -0000 Ok, so what exactly needs to be done to get full hifn support working in 4.x/5.x? I seem to have lost the original train of thought here. -Andrew On Tue, Apr 13, 2004 at 02:19:43PM -0400, mwlucas@blackhelicopters.org wrote 1.5K bytes in 37 lines about: : On Thu, Apr 08, 2004 at 05:18:33PM +0200, Poul-Henning Kamp wrote: : > In message <20040408144322.GA83448@bewilderbeast.blackhelicopters.org>, "Michae : > l W. Lucas" writes: : > >On Thu, Apr 08, 2004 at 04:28:37PM +0200, Poul-Henning Kamp wrote: : > >> >>Look at VPN14x1 from www.soekris.com, it's darn cheap too. : > > : > >Thanks, phk! : > > : > >For $79, it's cheap enough that I could put a whole stack of them in a : > >machine. Can FreeBSD take advantage of multiple cards like that? : > : > I think so, but I am not sure the code currently does load-sharing : > or just "try to find a card which can do this job" sharing. : > : > Maybe sam@ would know, you should probably ask him. : : OK, for the record I asked sam@. He says that the VPN1401 has issues : for (at a minimum) symmetric crypto ops, but he hasn't had time to : investigate and doesn't own a 1401, so... : : He also says that he considers the Broadcom 582x is the best : accelerator available, except that it isn't available retail. :-( : : So, it looks like my choices are rapidly narrowing. It seems that the : powercrypt cards are well-supported, perhaps I'll give them a call. : : ==ml : : -- : Michael Lucas mwlucas@FreeBSD.org, mwlucas@BlackHelicopters.org : "I'm sorry, but 'Social Darwinism' is no excuse for killing all of : your co-workers." -- Ivan Brunetti : http://www.BlackHelicopters.org/~mwlucas/ : _______________________________________________ : freebsd-security@freebsd.org mailing list : http://lists.freebsd.org/mailman/listinfo/freebsd-security : To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" --