Date: Mon, 24 Feb 2003 15:12:33 -0500 From: Mike Tancsa <mike@sentex.net> To: freebsd-stable@FreeBSD.ORG Subject: Re: HEADS UP: OpenSSL 0.9.7 in -STABLE Message-ID: <5.2.0.9.0.20030224145408.05edb800@marble.sentex.ca> In-Reply-To: <20030214223844.GA96059@madman.celabo.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi all,
Is anyone trying to use a hardware accelerator in STABLE ?
dmesg shows
hifn0 mem 0xfa000000-0xfa000fff,0xfa800000-0xfa800fff irq 12 at device 15.0
on pci0
hifn0: Hifn 7951, rev 0, 128KB sram, 193 sessions
Yet, when doing some ssh tests, I see approximately the same load average
when blasting across a stream of data via ssh (using 3des) with the card
and without. I would have thought there would be some noticeable
difference? I have a large backup server that processes numerous dumps
piped via ssh. I thought this would be a good test box to see how
effective the card might be.
I have
# ls -l /dev/crypto
crw-rw-rw- 1 root operator 70, 0 Feb 24 11:16 /dev/crypto
and I have
device crypto
device hifn
in the kernel.
However, when I look through the NEWS file, there does not seem to be
specific mention of the HiFn ? Is there anything special I need to do in
order to build the lib to use the hardware accelerator ? Also the man page
for the HiFn states,
The Hifn 7951 and Hifn 7811 will also supply data to the kernel random(4)
subsystem.
Do I need to tell rndcontrol about it ?
I do see the following additional kernel mibs
# sysctl -x -A | grep -i cryp
kern.usercrypto: 1
kern.userasymcrypto: 1
kern.cryptodevallowsoft: 0
kern.crypto_stats: Format:S,cryptostats Length:144
Dump:0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
cryptodesc: 64, 0, 0, 0, 0
cryptop: 64, 0, 0, 0, 0
debug.crypto_timing: 0
Also, on a similar note, should not the FAST_IPSEC be documented or at
least mentioned in LINT ?
Thanks,
---Mike
At 04:38 PM 14/02/2003 -0600, Jacques A. Vidrine wrote:
>This new version of OpenSSL includes support for BSD cryptodev, so
>that you can offload processing to a supported crypto card (see the
>crypto(4) man page). There are a host of other improvements as well.
>See src/crypto/openssl/NEWS.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.2.0.9.0.20030224145408.05edb800>