From owner-freebsd-sparc64@FreeBSD.ORG Thu Mar 13 20:17:46 2014 Return-Path: Delivered-To: freebsd-sparc64@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 736877B1 for ; Thu, 13 Mar 2014 20:17:46 +0000 (UTC) Received: from h2.funkthat.com (gate2.funkthat.com [208.87.223.18]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 4FC8BA9E for ; Thu, 13 Mar 2014 20:17:46 +0000 (UTC) Received: from h2.funkthat.com (localhost [127.0.0.1]) by h2.funkthat.com (8.14.3/8.14.3) with ESMTP id s2DKHhBs031571 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 13 Mar 2014 13:17:44 -0700 (PDT) (envelope-from jmg@h2.funkthat.com) Received: (from jmg@localhost) by h2.funkthat.com (8.14.3/8.14.3/Submit) id s2DKHhek031569; Thu, 13 Mar 2014 13:17:43 -0700 (PDT) (envelope-from jmg) Date: Thu, 13 Mar 2014 13:17:43 -0700 From: John-Mark Gurney To: Rob Sciuk Subject: Re: SSL acceleration cards Message-ID: <20140313201743.GL32089@funkthat.com> Mail-Followup-To: Rob Sciuk , Riccardo Veraldi , freebsd-sparc64 References: <53217D98.3040408@gmail.com> <20140313163526.GJ32089@funkthat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i X-Operating-System: FreeBSD 7.2-RELEASE i386 X-PGP-Fingerprint: 54BA 873B 6515 3F10 9E88 9322 9CB1 8F74 6D3F A396 X-Files: The truth is out there X-URL: http://resnet.uoregon.edu/~gurney_j/ X-Resume: http://resnet.uoregon.edu/~gurney_j/resume.html X-TipJar: bitcoin:13Qmb6AeTgQecazTWph4XasEsP7nGRbAPE X-to-the-FBI-CIA-and-NSA: HI! HOW YA DOIN? can i haz chizburger? X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.2 (h2.funkthat.com [127.0.0.1]); Thu, 13 Mar 2014 13:17:44 -0700 (PDT) Cc: freebsd-sparc64 X-BeenThere: freebsd-sparc64@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Porting FreeBSD to the Sparc List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Mar 2014 20:17:46 -0000 Rob Sciuk wrote this message on Thu, Mar 13, 2014 at 14:38 -0400: > On Thu, 13 Mar 2014, John-Mark Gurney wrote: > > >Date: Thu, 13 Mar 2014 09:35:26 -0700 > >From: John-Mark Gurney > >To: Riccardo Veraldi > >Cc: freebsd-sparc64 > >Subject: Re: SSL acceleration cards > > > >Riccardo Veraldi wrote this message on Thu, Mar 13, 2014 at 10:42 +0100: > >>I have a Sun Blade system with FreeBSD 9.2 > >>I would like to ask which SSL acceleration card is well supported in > >>particular for sparc64 platform. > >>Any of the one dor x86 will work also on sparc64 ? > >>anyone uses that on sparc64 platforms ? > > > >I don't know of any modern crypto acceleration card that is supported > >by FreeBSD... There are many old ones, like the hifn, but when I > >was researching them a while back, the performance was so slow that > >you might as well do software crypto... > > > >The other one is Broadcom's (ubsec(4)) but the faster card only runs at > >1Gbit/s and no support for AES-GCM (though we don't have AES-GCM support > >in the tree, so it wouldn't help anyways)... > > > >I'm not sure if anyone has ever tried to run these cards in a non-x86 > >machine... There could be endian issues w/ the drivers.... > > > >When trying to purchase these cards, either I couldn't find a supplier, > >or the price was so high, it'd be cheaper to buy a whole new system w/ > >a modern amd64 processor that has AES-NI to do it... Even some sub-$150 > >CPUs support AES-NI which can give you 2GBbytes/s per core AES-XTS > >(sans geli overhead)... I did most of my AES-NI work on an AMD > >A10-5700... Though FreeBSD 9.2 doesn't have all the latest AES-NI > >improvements, nor does 9-stable, so AES-NI is only marginally faster > >than software crypto in 9.x... > > > >There are some modern cards out there, but no one has written drivers > >out there, or the vendors are not supporting writing drivers for > >them... > > > >What is your use case that you are looking to use the card for? > > Did I read somewhere about using GPU's (3D accelerated graphics cards) as > accelerators using domain specific languages? That could definately be done, but as far as I know, we don't have any support for running code on the GPU in FreeBSD yet... It also depends upon the use case... If you want it for IPSEC, you need to have the driver be able to run in kernel... If you're just talking about improving OpenSSL, that could definately be done in userland... -- John-Mark Gurney Voice: +1 415 225 5579 "All that I will do, has been done, All that I have, has not."