3DES really shouldn't pull down a dual 1.4GHz system that much; especially since pfSense definitely has an SMP kernel. A paper-napkin test on the dual 1.4GHz P-III Xeon I have (running SuSE 10.1) using 'openssl speed -multi 2 des-ede3' nets a solid 21MB/s (168Mbps). That's no measure of what you would get using IPsec in BSD, but it should be ballpark.
That said, if you really want to try it you could always go for a Soekris 1401 - relatively cheap ($73 apiece for two). They're about the cheapest crypto acceleration cards I've seen that were worth trying. Then again, unless you're doing bulk crypto (many large packets) you'll likely see no improvement whatsoever. RB --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
