From owner-freebsd-current@FreeBSD.ORG  Tue Aug  3 20:20:46 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2613016A4CE; Tue,  3 Aug 2004 20:20:46 +0000 (GMT)
Received: from ebb.errno.com (ebb.errno.com [66.127.85.87])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id BE7F243D2F; Tue,  3 Aug 2004 20:20:45 +0000 (GMT)
	(envelope-from sam@errno.com)
Received: from [66.127.85.91] ([66.127.85.91])
	(authenticated bits=0)
	by ebb.errno.com (8.12.9/8.12.6) with ESMTP id i73KKiWi089668
	(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
	Tue, 3 Aug 2004 13:20:45 -0700 (PDT)
	(envelope-from sam@errno.com)
From: Sam Leffler <sam@errno.com>
Organization: Errno Consulting
To: freebsd-current@freebsd.org
Date: Tue, 3 Aug 2004 13:20:17 -0700
User-Agent: KMail/1.6.1
References: <20040803214133.31dd9b03.nork@FreeBSD.org>
	<6.1.2.0.0.20040803092531.08ffed10@64.7.153.2>
	<20040803111428.S15648@carver.gumbysoft.com>
In-Reply-To: <20040803111428.S15648@carver.gumbysoft.com>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <200408031320.17076.sam@errno.com>
cc: Norikatsu Shigemura <nork@freebsd.org>
cc: Mike Tancsa <mike@sentex.net>
Subject: Re: OpenSSL with hifn(4) (cryptodev)
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Aug 2004 20:20:46 -0000

On Tuesday 03 August 2004 11:16 am, Doug White wrote:
> On Tue, 3 Aug 2004, Mike Tancsa wrote:
> > At 08:41 AM 03/08/2004, Norikatsu Shigemura wrote:
> > >Hi sam!
> > >
> > >         I have two Soekris vpn1401 crypto accelerator cards.  I
> > > installed these to 4-stable machine and 5-current machine.
> >
> > Hi,
> >          Not all things are accelerated in openssl.  Also depending on
> > the CPU you use, it wont be faster and might even be slower.  Where you
> > really win is with concurrent jobs.  In our app, our backup server takes
> > several ssh streams of dump and tar. The P4 2.4 keeps up just fine even
> > when 50Mb/s of traffic is coming in with the card, but is too taxed
> > without it.
>
> Also, your app has to ask for the acceleration if they want it, by
> requesting the 'cryptodev' engine.  And that requires OpenSSL 0.9.7, which
> you probably have since the 'openssl engine' command exists.
>
> nork, which app(s) are you trying to accelerate?

I don't believe this is correct.  Unless something has changed libcrypto (from 
openssl) will check for /dev/crypto, query what algorithms are supported, and 
then use h/w acceleration if it exists.

	Sam