From owner-freebsd-net@FreeBSD.ORG Fri Oct 9 18:49:47 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 44CBF106568F for ; Fri, 9 Oct 2009 18:49:47 +0000 (UTC) (envelope-from pyunyh@gmail.com) Received: from mail-fx0-f222.google.com (mail-fx0-f222.google.com [209.85.220.222]) by mx1.freebsd.org (Postfix) with ESMTP id 716B48FC0C for ; Fri, 9 Oct 2009 18:49:46 +0000 (UTC) Received: by fxm22 with SMTP id 22so6789160fxm.36 for ; Fri, 09 Oct 2009 11:49:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:received:from:date:to:cc :subject:message-id:reply-to:references:mime-version:content-type :content-disposition:in-reply-to:user-agent; bh=QZD+uaYq5jWfXIEBpVuh/yoNES22e8d0fl8Jt0Uk5CI=; b=hLq9Cp6Qx1DYAX8yujonAupH9POdSixBDB8+hREsCI9/hDJHpiMnDt6E/IPfGZb0bD WFZlZP5r5E+ffzhJxJdO/mqsLYBil5D13mdHif6t4OEg10nRMOJ9OhfUdKcif7aaBpG+ N9UhBF0A91Mt7giEeM7mbqzQt6AZBI/j9OgK0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:date:to:cc:subject:message-id:reply-to:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; b=Un76pzgvwLJJhuXldKPqlQylORezFuSTf3n3UuA/luTQCaLQUB7TOwZfrosvCXJWBp eL9qOoKbgYJuCnMHAEcU0Y9ha5qjPsqAtb7rIS0UMy/buN/l5fwFqNo9KPj0TkmFuOu7 fXif2TyJvd0b3ikvWRmNxtvWATTLgWk4Gl/Z4= Received: by 10.86.222.5 with SMTP id u5mr2728816fgg.67.1255114185469; Fri, 09 Oct 2009 11:49:45 -0700 (PDT) Received: from pyunyh@gmail.com ([174.35.1.224]) by mx.google.com with ESMTPS id 4sm585275fge.22.2009.10.09.11.49.40 (version=TLSv1/SSLv3 cipher=RC4-MD5); Fri, 09 Oct 2009 11:49:42 -0700 (PDT) Received: by pyunyh@gmail.com (sSMTP sendmail emulation); Fri, 9 Oct 2009 11:48:31 -0700 From: Pyun YongHyeon Date: Fri, 9 Oct 2009 11:48:31 -0700 To: Jack Vogel Message-ID: <20091009184831.GH3843@michelle.cdnetworks.com> References: <20091008174521.GE3843@michelle.cdnetworks.com> <2a41acea0910091117q6cfab252sa8d5dfcf0182b660@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2a41acea0910091117q6cfab252sa8d5dfcf0182b660@mail.gmail.com> User-Agent: Mutt/1.4.2.3i Cc: Siquijor Philips , sam@FreeBSD.org, freebsd-drivers@freebsd.org, freebsd-net@freebsd.org Subject: Re: intel 82576 ipsec offload? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: pyunyh@gmail.com List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2009 18:49:47 -0000 On Fri, Oct 09, 2009 at 11:17:00AM -0700, Jack Vogel wrote: > I am Jack, the network engineer at Intel responsible for all FreeBSD wired > lan drivers. > This is the first I've seen about this. Our understanding was that the > infrastructure needed > to do IPSec was not available for either Linux or FreeBSD, can you please > explain things? > I guess we already have crypto(9) infrastructure to support IPSec in kernel. CCed to sam who may know what is required to implement IPSec offloading in ethernet driver. > If everything is there except the support in the driver then I might be able > to add that to > my queue. > > Cheers, > > Jack > > > On Thu, Oct 8, 2009 at 9:14 PM, Siquijor Philips > wrote: > > > On Fri, Oct 9, 2009 at 1:45 AM, Pyun YongHyeon wrote: > > > On Thu, Oct 08, 2009 at 01:24:20PM +0800, Siquijor Philips wrote: > > >> Hi, > > >> > > >> I got a dual-port Intel Gigabit NIC with 82576 (ET) chipset > > >> http://www.intel.com/Assets/PDF/prodbrief/320116.pdf. It has a feature > > >> on IPsec offloading but it only mentioned Microsoft Windows 2008 and > > >> Vista servers. I wonder if FreeBSD have also support on this feature? > > >> > > > > > > AFAIK it's not yet, not sure whether Jack has plan to implement the > > > offloading. I know old Intel i82550 also supported IPSec offloading > > > but Intel didn't release required information to implement it. 3Com > > > also supported IPSec offloading in their 3XP hardwares(txp(4)) but > > > the offloading was not implemented. > > > > > > > Hi Pyun, > > > > Thanks for your info! By the way, who is Jack? Is he the author of > > this driver? I really need to have this feature usable on the driver. > > I bought these NICs with 82576 chipset for the purpose of implementing > > IPsec in my network and my current FreeBSD servers could benefit it. > > Just really thought it has support because FreeBSD was already part of > > the supported operating system. I was alerted when I've re-read the > > product info document again that it only support Windows 2008 and > > Vista platforms. Now, I've confirmed that with the current existing > > driver. I hope this guy has the plan of implementing it sooner because > > I really need it. > > > > Thanks, > > Siquijor