Date: Wed, 3 May 2006 23:57:57 -0700 From: Michael DeMan <michael@staff.openaccess.org> To: Bruce M Simpson <bms@spc.org> Cc: freebsd-net@freebsd.org Subject: Re: crypto accelerators Message-ID: <5B0C06B7-292F-4F69-99D5-08C90D5C5BF2@staff.openaccess.org> In-Reply-To: <20060418191015.GE28496@spc.org> References: <200604180244.k3I2icZj076600@white.dogwood.com> <20060418191015.GE28496@spc.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, No on the SSH. Look at the specs, I think the 1401 cards will be helpful only on older IPSec circuits. I am not 100% sure here, I haven't looked at any of this in a few years, this is just from recollection. Michael F. DeMan Director of Technology OpenAccess Network Services Bellingham, WA 98225 michael@staff.openaccess.org 360-647-0785 On Apr 18, 2006, at 12:10 PM, Bruce M Simpson wrote: > On Mon, Apr 17, 2006 at 04:44:38PM -1000, Dave Cornejo wrote: >> So the question is whether these cards, regardless of their affect on >> throughput, increase usable CPU cycles? I have several Soekris 1401 >> cards and am wondering if there would be any point to putting them >> into some machines that provide logins over ssh. These machines are >> generally pretty good spec, 2.4GHz+, 1GB RAM, Intel MBs, mostly >> on-board peripherals. > > Given that spec of machine, I don't see that a hardware cipher would > offer much improvement -- and some of the available crypto > accelerators > don't perform Diffie-Helmann or AES, some do. > > I myself have a ubsec(4) card, and even when I hacked OpenSSH to use > OpenSSL engine support by default (with someone else's patch), I > didn't > see that much improvement (even when I forced the use of MD5, RSA and > 3DES). > > I could be wrong though - the above is qualitative not quantitative. > > Regards, > BMS > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5B0C06B7-292F-4F69-99D5-08C90D5C5BF2>