From owner-freebsd-stable  Tue Feb 25  7:26:17 2003
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 589E337B401; Tue, 25 Feb 2003 07:26:16 -0800 (PST)
Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id B2B2543F3F; Tue, 25 Feb 2003 07:26:14 -0800 (PST)
	(envelope-from mike@sentex.net)
Received: from simian.sentex.net (simeon.sentex.ca [192.168.43.27])
	by lava.sentex.ca (8.12.7/8.12.7) with ESMTP id h1PFQ5pG043678;
	Tue, 25 Feb 2003 10:26:05 -0500 (EST)
	(envelope-from mike@sentex.net)
Message-Id: <5.2.0.9.0.20030225102526.05852540@marble.sentex.ca>
X-Sender: mdtpop@marble.sentex.ca (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Date: Tue, 25 Feb 2003 10:30:54 -0500
To: "Jacques A. Vidrine" <nectar@FreeBSD.ORG>
From: Mike Tancsa <mike@sentex.net>
Subject: Re: HEADS UP: OpenSSL 0.9.7 in -STABLE
Cc: freebsd-stable@FreeBSD.ORG
In-Reply-To: <20030225133248.GC95282@madman.celabo.org>
References: <5.2.0.9.0.20030224145408.05edb800@marble.sentex.ca>
 <20030214223844.GA96059@madman.celabo.org>
 <5.2.0.9.0.20030224145408.05edb800@marble.sentex.ca>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Virus-Scanned: By Sentex Communications (lava/20020517)
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

At 07:32 AM 25/02/2003 -0600, Jacques A. Vidrine wrote:
>On Mon, Feb 24, 2003 at 03:12:33PM -0500, Mike Tancsa wrote:
> > and I have
> > device  crypto
> > device hifn
> > in the kernel.
>
>I believe you also need `device cryptodev', else when your application
>tries to open /dev/crypto it will get ENXIO (use truss or ktrace to
>see if this is what is happening).

That was it, Thanks!

There is now a VERY noticeable difference in the amount of CPU that sshd 
takes.  The backup server is a PIII800. When doing a dump from a fast 
client, with 3des I was looking at close to 40%-50% of CPU going to sshd on 
the server. Now I see about 3%-5%.

The stats are increasing now as well.

# sysctl -A -x | grep -i cryp
kern.usercrypto: 1
kern.userasymcrypto: 1
kern.cryptodevallowsoft: 0
kern.crypto_stats: Format:S,cryptostats Length:144 
Dump:0x74e90900000000000000000000000000000000004ae70900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
cryptodesc:       64,        0,      0,    128,   649588
cryptop:          64,        0,      0,    128,   649588


         ---Mike 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message