Re: IPSEC/SSL accelerator

2011-05-20 Thread Maxim Bourmistrov
Yes, it would be interesting to hear some devs on this topic. A specially about drivers on board: 1. What can be done and what is missing. 2. What hw is worth to spend money on and what kind of hw devs need to make it worth to spend money on. I'd like to see this kind on acceleration perform

Re: IPSEC/SSL accelerator

2011-05-19 Thread Oeschger Patrick
hi all still thinking about the diff between 2gbit in the specs and about 400mbit in real world on a pretty new processor that's a *big* difference so we can say that every accelerator board - regardless if pci-e 16x or miniPCI - will not be able to perform at lets say 1gbit because of the need of

Re: IPSEC/SSL accelerator

2011-05-18 Thread Joosep
On Tue, May 17, 2011 at 9:40 AM, patrick.oesch...@bluewin.ch patrick.oesch...@bluewin.ch wrote: i am looking for a IPSEC accelerator board for a company firewall to terminate multiple IPSEC tunnels (branches) expected IPSEC traffic: ~500mbit/s (100 tunnels) any recommendations for a *pci

Re: IPSEC/SSL accelerator

2011-05-18 Thread Patrick Oeschger
thank you for your input why 'only' 400mbit? the specs say 2gbit for BCM5862 in a pci-e 4x slot... sounds like quite some overhead writing/ getting packets to/from the card - i would have expected it higher but i do not want to question your tests *hmmm* Sent from Pat's iPhone On 18.05.2011, at

Re: IPSEC/SSL accelerator

2011-05-18 Thread Joosep
On Wed, May 18, 2011 at 10:06 AM, Patrick Oeschger patrick.oesch...@bluewin.ch wrote: thank you for your input why 'only' 400mbit? the specs say 2gbit for BCM5862 in a pci-e 4x slot... sounds like quite some overhead writing/ getting packets to/from the card - i would have expected it

Re: IPSEC/SSL accelerator

2011-05-18 Thread Maxim Bourmistrov
How does it look in dmesg for this card? Sent from my iPhone On May 18, 2011, at 10:42, Joosep joos...@gmail.com wrote: On Wed, May 18, 2011 at 10:06 AM, Patrick Oeschger patrick.oesch...@bluewin.ch wrote: thank you for your input why 'only' 400mbit? the specs say 2gbit for BCM5862 in a

Re: IPSEC/SSL accelerator

2011-05-18 Thread Joosep
Hi! ubsec0 at pci5 dev 0 function 0 Broadcom 5862 rev 0x01: 3DES MD5 SHA1 AES PK, apic 9 int 0 (irq 10) Joosep On Wed, May 18, 2011 at 8:56 PM, Maxim Bourmistrov m...@alumni.chalmers.sewrote: How does it look in dmesg for this card? Sent from my iPhone On May 18, 2011, at 10:42, Joosep

IPSEC/SSL accelerator

2011-05-17 Thread patrick.oesch...@bluewin.ch
i am looking for a IPSEC accelerator board for a company firewall to terminate multiple IPSEC tunnels (branches) expected IPSEC traffic: ~500mbit/s (100 tunnels) any recommendations for a *pci express 4x* board handling this amount of traffic? thank you /pat

Re: IPSEC/SSL accelerator

2011-05-17 Thread Stuart Henderson
On 2011-05-17, patrick.oesch...@bluewin.ch patrick.oesch...@bluewin.ch wrote: i am looking for a IPSEC accelerator board for a company firewall to terminate multiple IPSEC tunnels (branches) expected IPSEC traffic: ~500mbit/s (100 tunnels) any recommendations for a *pci express 4x* board

Re: IPSEC/SSL accelerator

2011-05-17 Thread Chris Cappuccio
Stuart Henderson [s...@spacehopper.org] wrote: there hasn't been support for any newer bus-based accelerators added recently (overheads for these are typically rather high). currently if you want fast AES, you should be looking at the newer intel cpus with AESNI (and OpenBSD 4.9 or newer),

Re: IPSEC/SSL accelerator

2011-05-17 Thread Mike Belopuhov
On Tue, May 17, 2011 at 3:45 PM, Stuart Henderson s...@spacehopper.org wrote: On 2011-05-17, patrick.oesch...@bluewin.ch patrick.oesch...@bluewin.ch wrote: i am looking for a IPSEC accelerator board for a company firewall to terminate multiple IPSEC tunnels (branches) expected IPSEC