From owner-freebsd-hackers@FreeBSD.ORG Mon Jun 23 17:48:02 2008 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E4E601065686; Mon, 23 Jun 2008 17:48:02 +0000 (UTC) (envelope-from patfbsd@davenulle.org) Received: from smtp.lamaiziere.net (net.lamaiziere.net [213.186.42.107]) by mx1.freebsd.org (Postfix) with ESMTP id 9B7C68FC2A; Mon, 23 Jun 2008 17:48:02 +0000 (UTC) (envelope-from patfbsd@davenulle.org) Received: from baby-jane.lamaiziere.net (15.10.87-79.rev.gaoland.net [79.87.10.15]) by smtp.lamaiziere.net (Postfix) with ESMTP id 0FF27118059D; Mon, 23 Jun 2008 19:48:01 +0200 (CEST) Received: from baby-jane-lamaiziere-net.local (localhost [127.0.0.1]) by baby-jane.lamaiziere.net (Postfix) with ESMTP id F140F4FAEDC; Mon, 23 Jun 2008 19:47:59 +0200 (CEST) Date: Mon, 23 Jun 2008 19:47:58 +0200 From: Patrick =?ISO-8859-15?Q?Lamaizi=E8re?= To: "Ivan Voras" Message-ID: <20080623194758.6df9cafc@baby-jane-lamaiziere-net.local> In-Reply-To: <9bbcef730806221220u4f8a3f45q305a927efdf5e16f@mail.gmail.com> References: <20080606234135.46144207@baby-jane-lamaiziere-net.local> <20080622170507.5ac469d2@baby-jane-lamaiziere-net.local> <20080622202041.07f85145@baby-jane-lamaiziere-net.local> <9bbcef730806221220u4f8a3f45q305a927efdf5e16f@mail.gmail.com> Organization: /dave/nulle X-Mailer: Claws Mail 3.3.1 (GTK+ 2.12.8; i386-apple-darwin9.2.0) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 8bit Cc: freebsd-hackers@freebsd.org, freebsd-stable@freebsd.org Subject: Re: AMD Geode LX crypto accelerator (glxsb) X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Jun 2008 17:48:03 -0000 Le Sun, 22 Jun 2008 21:20:02 +0200, "Ivan Voras" a écrit : Hi, > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes > 8192 bytes aes-128 cbc 5359.57k 5577.49k 5654.53k > 5639.81k 5679.65k aes-128-cbc 394.62k 1471.97k > 5457.89k 15097.21k 25895.72k I've got the same results. The encryption of a file of 360 MBytes takes around 20s with the hardware and 1m10s by software. I am playing to overload my box (a soekris net5501) with ping floods on ipsec (hmac-md5 and rijndael) by a modern computer. With four 'ping -f -s 3000', 'top' reports CPU "0.4% user 0.0 nice 1.6% system, 90.3% interrupt, 7.8% idle". With five 'ping', top does not run, and the kernel does not display the message 'limiting icmp ping response to 300 to 200' anymore too (on the serial console). With the hardware, i can use 8 flood pings without any problem. Top shows CPU: 0.0% user, 0.0% nice, 33.5% system, 12.5% interrupt, 54.1% idle And the kernel displays "limiting icmp ping response from 900 to 200 packets/s.", instead '300 to 200'. So it seems there is a real improvement. Regards.