Re: Cavium crypto card

2006-03-27 Thread Theo de Raadt
> Some crypto cards are based on a supported chip, but are simply
> re-branded. I took a brief look at the Cavium and it looks like they
> have their own chips. We don't have support for those. They also state
> they have drivers for FreeBSD. Perhaps you can talk them into making
> an BSD-licensed OpenBSD driver or donating specs/cards to the project
> and someone might offer to write a driver.

Normally when a vendor says they have a driver for some operating
system, it means

We have a driver binary that we load into the kernel, or
one that runs in userland that talks to the card via
/dev/pci or /dev/mem, and then OpenSSL's engine handles
this via a dynamically loading a binary .so library we
supply.

Not exactly what most of you want running.



Re: Cavium crypto card

2006-03-27 Thread Srebrenko Sehic
> Has anybody a 'High performance IPSec and SSL accelerator PCI card with Cavium
> CN1010' running on OpenBSD?
>
> I am looking for a crypto card and it could be an option but it isn't in the
> hardware supported list in http://www.openbsd.org/i386.html#hardware

Some crypto cards are based on a supported chip, but are simply
re-branded. I took a brief look at the Cavium and it looks like they
have their own chips. We don't have support for those. They also state
they have drivers for FreeBSD. Perhaps you can talk them into making
an BSD-licensed OpenBSD driver or donating specs/cards to the project
and someone might offer to write a driver.

There is some (slow) work going on to support newer chips from
Safenet. I guess you can call them "high-performance", since they
claim that the new chips can do >1gbps symmetric crypto ops. The
problem with crypto cards is moving data in and out from the kernel.
But, that's another story.



Cavium crypto card

2006-03-27 Thread Abel Talaverón Estevez
Hi all,

Has anybody a 'High performance IPSec and SSL accelerator PCI card with Cavium 
CN1010' running on OpenBSD?

I am looking for a crypto card and it could be an option but it isn't in the 
hardware supported list in http://www.openbsd.org/i386.html#hardware

Thanks!
-- 
Abel Talaversn Estevez
Ingeniero Superior de Telecomunicaciones
Analista de Proyectos

OpenWired
Caballero 87 - Bajos
08029 - Barcelona
Tel. 93 495 0990
Fax. 93 419 4591

Openwired
Alejandro Villegas,29
28043 - MADRID - ESPAQA
Telifono: 91 300 51 09
Fax:  91 300 28 13
http://www.openwired.com