From owner-freebsd-current@FreeBSD.ORG Tue Aug 3 18:16:58 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4102216A4CE; Tue, 3 Aug 2004 18:16:58 +0000 (GMT) Received: from carver.gumbysoft.com (carver.gumbysoft.com [66.220.23.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 30F0143D49; Tue, 3 Aug 2004 18:16:58 +0000 (GMT) (envelope-from dwhite@gumbysoft.com) Received: by carver.gumbysoft.com (Postfix, from userid 1000) id 1A16E72DF2; Tue, 3 Aug 2004 11:16:58 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by carver.gumbysoft.com (Postfix) with ESMTP id 1647572DB5; Tue, 3 Aug 2004 11:16:58 -0700 (PDT) Date: Tue, 3 Aug 2004 11:16:58 -0700 (PDT) From: Doug White To: Mike Tancsa In-Reply-To: <6.1.2.0.0.20040803092531.08ffed10@64.7.153.2> Message-ID: <20040803111428.S15648@carver.gumbysoft.com> References: <20040803214133.31dd9b03.nork@FreeBSD.org> <6.1.2.0.0.20040803092531.08ffed10@64.7.153.2> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-current@freebsd.org cc: Norikatsu Shigemura Subject: Re: OpenSSL with hifn(4) (cryptodev) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Aug 2004 18:16:58 -0000 On Tue, 3 Aug 2004, Mike Tancsa wrote: > > At 08:41 AM 03/08/2004, Norikatsu Shigemura wrote: > >Hi sam! > > > > I have two Soekris vpn1401 crypto accelerator cards. I installed > > these to 4-stable machine and 5-current machine. > > Hi, > Not all things are accelerated in openssl. Also depending on the > CPU you use, it wont be faster and might even be slower. Where you really > win is with concurrent jobs. In our app, our backup server takes several > ssh streams of dump and tar. The P4 2.4 keeps up just fine even when 50Mb/s > of traffic is coming in with the card, but is too taxed without it. Also, your app has to ask for the acceleration if they want it, by requesting the 'cryptodev' engine. And that requires OpenSSL 0.9.7, which you probably have since the 'openssl engine' command exists. nork, which app(s) are you trying to accelerate? -- Doug White | FreeBSD: The Power to Serve dwhite@gumbysoft.com | www.FreeBSD.org