Earlier versions of Bacula used OpenSSL, until they got shirty about the 
license. I still have old versions of the servers that I run on systems that 
have hardware SSL accelerators (zSeries), and it works fine if your openssl.cnf 
 is set up to use it AND your SSL engine supports symmetric offload (Bacula 
doesn't make/break connections that often, so the accelerators that don't 
include the symmetric offload don't really help much).


On 3/30/09 12:56 PM, "Steve Polyack" <[email protected]> wrote:

Has anyone taken a look at including OpenSSL engine(3) support, enabling
the use of hardware crypto-accelerators for Bacula's encryption?

At the moment it appears the taking large encrypted backups puts a
decent amount of load on the CPU.  On production systems in certain
environments, this may not be acceptable when backups run for long
periods of time.

The engines framework in OpenSSL abstracts the hardware devices from
OpenSSL via configuration, causing these devices to be used when
compatible ciphers are used.  This can be configured in openssl.cnf
(provided the application considers this configuration file) or in the
application itself.  I've tried including this myself, using a Hifn7955
card, without much luck.

Does anybody else have any experience implementing this?


------------------------------------------------------------------------------
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel


------------------------------------------------------------------------------
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel

Reply via email to