Hi sam!
I have two Soekris vpn1401 crypto accelerator cards. I installed
these to 4-stable machine and 5-current machine.
4-stable(FreeBSD sakura.ninth-nine.com 4.10-STABLE FreeBSD 4.10-STABLE #16: Mon
Aug 2 20:45:23 JST 2004
nork@sakura.ninth-nine.com:/usr/obj/usr/src/sys/SAKURA i386)
hifn0 mem 0xfa100000-0xfa107fff,0xfa108000-0xfa109fff,0xfa10e000-0xfa10efff irq
11 at device 9.0 on pci0
hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
options INET #InterNETworking
options INET6 #IPv6 communications protocols
#options FAST_IPSEC # Fast IPsec
options IPSEC #IP security
options IPSEC_ESP #IP security (crypto; define w/ IPSEC)
options IPSEC_DEBUG #debug for IP security
pseudo-device crypto # core crypto support
pseudo-device cryptodev # /dev/crypto for access to h/w
device hifn # Hifn 7951, 7781, etc.
device rndtest # FIPS 140-2 entropy tester
options HIFN_DEBUG # enable debugging support: hw.hifn.debug
options HIFN_RNDTEST # enable rndtest support
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
5-current(FreeBSD nadesico.ninth-nine.com 5.2-CURRENT FreeBSD 5.2-CURRENT #10:
Tue Aug 3 02:18:55 JST 2004
nork@nadesico.ninth-nine.com:/devel/obj/devel/src/sys/NADESICO i386)
hifn0 mem 0xf7100000-0xf7107fff,0xf710e000-0xf710ffff,0xf7114000-0xf7114fff irq
16 at device 10.0 on pci0
hifn0: [GIANT-LOCKED]
hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
options INET #InterNETworking
options INET6 #IPv6 communications protocols
#options IPSEC #IP security
#options IPSEC_ESP #IP security (crypto; define w/ IPSEC)
#options IPSEC_DEBUG #debug for IP security
options FAST_IPSEC #new IPsec (cannot define w/ IPSEC)
device crypto # core crypto support
device cryptodev # /dev/crypto for access to h/w
device rndtest # FIPS 140-2 entropy tester
device hifn # Hifn 7951, 7781, etc.
options HIFN_DEBUG # enable debugging support: hw.hifn.debug
options HIFN_RNDTEST # enable rndtest support
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
I confirmed `openssl speed -engine cryptodev', but it looks not
works. Because 1st: same speed (before/after install it), 2nd: CPU
loadavg is always high. So I consider that openssl didn't use
cryptodev. Do you have any idea?
# If I confirm it looks good, I will enable FAST_IPSEC on 4-stable.