From owner-freebsd-hardware@FreeBSD.ORG Mon Oct 12 16:18:11 2009 Return-Path: Delivered-To: freebsd-hardware@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8837B106566B for ; Mon, 12 Oct 2009 16:18:11 +0000 (UTC) (envelope-from case@sdf.lonestar.org) Received: from sdf.lonestar.org (ol.freeshell.org [192.94.73.20]) by mx1.freebsd.org (Postfix) with ESMTP id 5259F8FC19 for ; Mon, 12 Oct 2009 16:18:10 +0000 (UTC) Received: from sdf.lonestar.org (IDENT:case@otaku.freeshell.org [192.94.73.2]) by sdf.lonestar.org (8.14.3/8.14.3) with ESMTP id n9CG3uWu027522 for ; Mon, 12 Oct 2009 16:03:56 GMT Received: (from case@localhost) by sdf.lonestar.org (8.14.3/8.12.8/Submit) id n9CG3t7F015236; Mon, 12 Oct 2009 16:03:56 GMT Date: Mon, 12 Oct 2009 16:03:55 +0000 (UTC) From: John Case X-X-Sender: case@otaku.freeshell.org To: freebsd-hardware@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Subject: SSL/AES acceleration in FreeBSD ? X-BeenThere: freebsd-hardware@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: General discussion of FreeBSD hardware List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2009 16:18:11 -0000 This presentation document from meetBSD 2008: http://www.paeps.cx/pubs/crypto_acceleration/slides.pdf lists these supported devices: glxsb(4) AMD Geode hifn(4) Hifn padlock(4) VIA Padlock safe(4) SafeNet ubsec(4) Broadcom/Bluesteel However, I can only find "safe" as a isted device in generic kernel configuration files. The other devices are not anywhere in kernel config files. I am able to find hifn.ko and /sys/modules/padlock and ubsec.ko in the source tree, however. glxsb, however, is nowhere to be found. My goal is to accelerate the Tor onion router using hardware on FreeBSD. Since safe(4) is a standard kernel config option, that seemed a likely starting place, however a cursory search shows that this is not really a working device and certainly not a trouble-free item to implement. Are any implementations of hardware crypto acceleration both stable and trouble-free in FreeBSD ? I appreciate all comments and suggestions.