From owner-freebsd-sparc64@FreeBSD.ORG Thu Mar 13 19:31:13 2014 Return-Path: Delivered-To: freebsd-sparc64@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6ABF6ACE for ; Thu, 13 Mar 2014 19:31:13 +0000 (UTC) Received: from mail-ee0-x235.google.com (mail-ee0-x235.google.com [IPv6:2a00:1450:4013:c00::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 00734616 for ; Thu, 13 Mar 2014 19:31:12 +0000 (UTC) Received: by mail-ee0-f53.google.com with SMTP id e51so604154eek.26 for ; Thu, 13 Mar 2014 12:31:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=+QQdRzJMDNVF1VLfw1CHRgCFCjQpp0mo+7w2m9FZhPQ=; b=SFcnor9hvZGiAcF/Yr9K2gW6v/PAA8DOHgE3sMoENOXknGk12e+aXc1wGVR14+0hOd PG023B6VVIfZL+6XlpXKDo+NVnk87FLnGcO7y733bcVca3/XsiN2L01M3K7hb0MWQX87 tDa4k0nX0V5HBmotIhCzGa3UQf/7NcdF8/sN6RfpNwA+NDEsJxFr0lqc+CnjUFOMOVhr YOkl0eAReo6sZ9NGARzw9YzwHHmFOkxzVNZa188R1UbH1PJ7Qms1uBwQnSiFo1KOBIRZ 7yHPV+Bca02rSplaDFdl17Rvv7CRBi3ecp6DAVhEQ1cXrUj8KO5I7ymKIuFZ2lt2aakf FKAQ== X-Received: by 10.14.95.2 with SMTP id o2mr4022047eef.69.1394739071415; Thu, 13 Mar 2014 12:31:11 -0700 (PDT) Received: from knuth.default.domain.invalid ([31.177.41.8]) by mx.google.com with ESMTPSA id i47sm11571681eeg.6.2014.03.13.12.31.09 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 13 Mar 2014 12:31:10 -0700 (PDT) Message-ID: <53220778.7080900@gmail.com> Date: Thu, 13 Mar 2014 20:31:04 +0100 From: Riccardo Veraldi User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: freebsd-sparc64 Subject: Re: SSL acceleration cards References: <53217D98.3040408@gmail.com> <20140313163526.GJ32089@funkthat.com> In-Reply-To: <20140313163526.GJ32089@funkthat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-sparc64@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Porting FreeBSD to the Sparc List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Mar 2014 19:31:13 -0000 the problem is that SSL applications like SSH fiel transfer with SCP or SFTP performs terrivle on Ultra SPARC III CPU, on 1Gbit network LAN i get only 3MB/s, and this is CPU bottle neck... i thought that a SSL accel card could help out a bit on my sun blade 1000 but maybe I am wrong... On 3/13/14 5:35 PM, John-Mark Gurney wrote: > Riccardo Veraldi wrote this message on Thu, Mar 13, 2014 at 10:42 +0100: >> I have a Sun Blade system with FreeBSD 9.2 >> I would like to ask which SSL acceleration card is well supported in >> par a iticular for sparc64 platform. >> Any of the one dor x86 will work also on sparc64 ? >> anyone uses that on sparc64 platforms ? > I don't know of any modern crypto acceleration card that is supported > by FreeBSD... There are many old ones, like the hifn, but when I > was researching them a while back, the performance was so slow that > you might as well do software crypto... > > The other one is Broadcom's (ubsec(4)) but the faster card only runs at > 1Gbit/s and no support for AES-GCM (though we don't have AES-GCM support > in the tree, so it wouldn't help anyways)... > > I'm not sure if anyone has ever tried to run these cards in a non-x86 > machine... There could be endian issues w/ the drivers.... > > When trying to purchase these cards, either I couldn't find a supplier, > or the price was so high, it'd be cheaper to buy a whole new system w/ > a modern amd64 processor that has AES-NI to do it... Even some sub-$150 > CPUs support AES-NI which can give you 2GBbytes/s per core AES-XTS > (sans geli overhead)... I did most of my AES-NI work on an AMD > A10-5700... Though FreeBSD 9.2 doesn't have all the latest AES-NI > improvements, nor does 9-stable, so AES-NI is only marginally faster > than software crypto in 9.x... > > There are some modern cards out there, but no one has written drivers > out there, or the vendors are not supporting writing drivers for > them... > > What is your use case that you are looking to use the card for? >