From owner-freebsd-net@FreeBSD.ORG Thu May 4 06:58:03 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 84CFC16A40A for ; Thu, 4 May 2006 06:58:03 +0000 (UTC) (envelope-from michael@staff.openaccess.org) Received: from smtp.openaccess.org (smtp.openaccess.org [66.165.52.46]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2F9BC43D53 for ; Thu, 4 May 2006 06:58:00 +0000 (GMT) (envelope-from michael@staff.openaccess.org) Received: from [192.168.2.149] (unknown [216.57.214.91]) by smtp.openaccess.org (Postfix) with ESMTP id 7C74D6D44BF; Wed, 3 May 2006 23:58:00 -0700 (PDT) In-Reply-To: <20060418191015.GE28496@spc.org> References: <200604180244.k3I2icZj076600@white.dogwood.com> <20060418191015.GE28496@spc.org> Mime-Version: 1.0 (Apple Message framework v749.3) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <5B0C06B7-292F-4F69-99D5-08C90D5C5BF2@staff.openaccess.org> Content-Transfer-Encoding: 7bit From: Michael DeMan Date: Wed, 3 May 2006 23:57:57 -0700 To: Bruce M Simpson X-Mailer: Apple Mail (2.749.3) Cc: freebsd-net@freebsd.org Subject: Re: crypto accelerators X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 May 2006 06:58:03 -0000 Hi, No on the SSH. Look at the specs, I think the 1401 cards will be helpful only on older IPSec circuits. I am not 100% sure here, I haven't looked at any of this in a few years, this is just from recollection. Michael F. DeMan Director of Technology OpenAccess Network Services Bellingham, WA 98225 michael@staff.openaccess.org 360-647-0785 On Apr 18, 2006, at 12:10 PM, Bruce M Simpson wrote: > On Mon, Apr 17, 2006 at 04:44:38PM -1000, Dave Cornejo wrote: >> So the question is whether these cards, regardless of their affect on >> throughput, increase usable CPU cycles? I have several Soekris 1401 >> cards and am wondering if there would be any point to putting them >> into some machines that provide logins over ssh. These machines are >> generally pretty good spec, 2.4GHz+, 1GB RAM, Intel MBs, mostly >> on-board peripherals. > > Given that spec of machine, I don't see that a hardware cipher would > offer much improvement -- and some of the available crypto > accelerators > don't perform Diffie-Helmann or AES, some do. > > I myself have a ubsec(4) card, and even when I hacked OpenSSH to use > OpenSSL engine support by default (with someone else's patch), I > didn't > see that much improvement (even when I forced the use of MD5, RSA and > 3DES). > > I could be wrong though - the above is qualitative not quantitative. > > Regards, > BMS > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >