Date: Fri, 18 Feb 2005 10:17:19 -0800 From: Sam Leffler <sam@errno.com> To: sekchye goh <sekchye@gmail.com> Cc: freebsd-security@freebsd.org Subject: Re: multiple crypto accelerator cards in one FreeBSD box Message-ID: <4216312F.10609@errno.com> In-Reply-To: <21f8a77b05021722173994d3bf@mail.gmail.com> References: <21f8a77b0502172000693da743@mail.gmail.com> <42157B60.8000404@errno.com> <21f8a77b05021722173994d3bf@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
sekchye goh wrote: > Hi Sam, > > On Thu, 17 Feb 2005 21:21:36 -0800, Sam Leffler <sam@errno.com> wrote: > >>Beware however that the current crypto code >>does not manage multiple cards well. If you decide to go with multiple >>cards you'll want to do some load balancing. > > > just to explore the load balancing, I searched but cannot find much > info on IPSEC load balancing with multiple crypto acceleretor cards. > How do I do IPSEC load balancing with multiple cards in FreeBSD? > Any pointers will be much appreciated. Thanks! The load balancing I mentioned was for the crypto subsystem. openbsd has a small change to round-robin session allocation across devices so you can actually use more than one crypto card in a machine. You could try that though I think you'd find the results unsatisfying. I did a prototype load balancer a while back that was more intelligent but never got it to the point where it could be committed. I'd like to revisit that work this year but it will depend on time+funding. Sam
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4216312F.10609>