From owner-freebsd-stable@FreeBSD.ORG Mon Jan 26 07:39:54 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5BB5E16A4CE for ; Mon, 26 Jan 2004 07:39:54 -0800 (PST) Received: from cray.e-card.bg (mjak.e-card.bg [212.91.167.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id D7AC443D8F for ; Mon, 26 Jan 2004 07:37:41 -0800 (PST) (envelope-from altares@cray.e-card.bg) Received: from cray.e-card.bg (localhost [127.0.0.1]) by cray.e-card.bg (8.12.9/8.12.9) with ESMTP id i0QFYZJx000747; Mon, 26 Jan 2004 17:34:35 +0200 (EET) (envelope-from altares@cray.e-card.bg) Received: (from altares@localhost) by cray.e-card.bg (8.12.9/8.12.9/Submit) id i0QFYUJ1000746; Mon, 26 Jan 2004 17:34:30 +0200 (EET) Date: Mon, 26 Jan 2004 17:34:30 +0200 From: Rumen Telbizov To: Mike Tancsa Message-ID: <20040126153430.GA230@e-card.bg> References: <20040126091424.GI688@e-card.bg> <6.0.1.1.0.20040126074335.04528dc8@209.112.4.2> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6.0.1.1.0.20040126074335.04528dc8@209.112.4.2> User-Agent: Mutt/1.4.1i cc: stable@freebsd.org Subject: Re: FreeBSD + Rainbow Cryptoswift X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Jan 2004 15:39:54 -0000 Thank for the reply Mike. I took a look at those cards (vpn1201 and vpn1211). They don't seem to have AES support and only support 2-8 RSA connections/sec. Rainbow say that their cards support 1000 RSA connections/sec which is quite astonishing. The vpn1401 and vpn1411 seem to have better performance but as you said the hifn(4) driver support is broken for those :( Anyway it would be interesting for me if you share your opinion about the performance you gained from those (1201 - 1211) cards in comparison to the software computations. It would be nice if tell me how much did you pay for these cards because there are no prices on the site! I read in a mailing list that the Rainbow's card (cryptoswift) is 1000 GBP. An interesing topic is if this performance could be gained with an smp machine (say 2-4 xeons + lots of RAM) instead of paying 1000 GBP for a card. I am still new in this research but there are no representatives in my country nor there are prices on the vendors' sites and I cannot make any comparison. I would greatly appreciate all your hints. Rumen Telbizov On Mon, Jan 26, 2004 at 07:57:12AM -0500, Mike Tancsa wrote: > > I dont know about the card you mention below, but the ones specifically > mentioned in the man pages are > > safe (4) > ubsec (4) > hifn (4) > > We have used HiFn 7951 based cards with really great results for IPSEC and > ssh acceleration. We bought the cards from www.soekris.com (VPN1201 and > VPN1211). The new card, the vpn1401 looks promising, but the drivers are > broken right now so I would stay away from it and cards based on that chip. > > ---Mike > > At 04:14 AM 26/01/2004, Rumen Telbizov wrote: > >Dear List, > > > >I would like to know if anyone has installed one of those > >Rainbow CryptoSwift PCI, SSL accelerators under FreeBSD? > >I was looking in the LINT file about the support of those > >cards but couldn't find anything. > >As far as I know there should be a kld (or in-kernel) support for > >those and some sort of integration between openssl and the > >card. > >My configuration is: FreeBSD 4.9-STABLE, Apache 1.3+mod_ssl > >and openssl! > > > >Thank you in advance. > > > >P.S. > >If you have any experience with any other cards (non Rainbow) > >I would appreciate if you share your opinion. > >_______________________________________________ > >freebsd-stable@freebsd.org mailing list > >http://lists.freebsd.org/mailman/listinfo/freebsd-stable > >To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > >