Re: What crypto card to buy?

2008-04-02 Thread Khalid Schofield
very interesting reply. I look forward to reading it in more depth (just got out of bed to check if I have replys) really I'm after using openbsd to make a vpn concentrator so the traffic will be high. On 2 Apr 2008, at 02:21, Girish Venkatachalam wrote: On 23:05:06 Apr 01, Christian

Re: What crypto card to buy?

2008-04-02 Thread Claer
On Tue, Apr 01 2008 at 00:15, Khalid Schofield wrote: Hi, I'm wondering what is the best crypto card to buy to use with openbsd to do AES and blowfish and the SSL encryption. The question you should ask yourself is Do you need an accelerated SSL card? As showed in http://marc.info/?l=openbsd

Re: What crypto card to buy?

2008-04-02 Thread Joe
On Apr 1, 2008, at 11:28 PM, Khalid Schofield wrote: very interesting reply. I look forward to reading it in more depth (just got out of bed to check if I have replys) really I'm after using openbsd to make a vpn concentrator so the traffic will be high. On 2 Apr 2008, at 02:21, Girish

What crypto card to buy?

2008-04-01 Thread Khalid Schofield
Hi, I'm wondering what is the best crypto card to buy to use with openbsd to do AES and blowfish and the SSL encryption. Is this the best buy? http://www.soekris.com/vpn1401.htm It mentions AES but not blowfish. thanks khalid

Re: What crypto card to buy?

2008-04-01 Thread Sean Cody
, Khalid Schofield wrote: Hi, I'm wondering what is the best crypto card to buy to use with openbsd to do AES and blowfish and the SSL encryption. Is this the best buy? http://www.soekris.com/vpn1401.htm It mentions AES but not blowfish. thanks khalid

Re: What crypto card to buy?

2008-04-01 Thread Christian Weisgerber
Khalid Schofield [EMAIL PROTECTED] wrote: I'm wondering what is the best crypto card to buy to use with openbsd to do AES and blowfish and the SSL encryption. Is this the best buy? http://www.soekris.com/vpn1401.htm It's the only one readily available in the retail market. (If I'm missing

Re: What crypto card to buy?

2008-04-01 Thread Girish Venkatachalam
On 23:05:06 Apr 01, Christian Weisgerber wrote: It mentions AES but not blowfish. Which means you are not losing anything. There isn't any crypto accelerator that implements Blowfish. Perhaps with reason. Blowfish's interest is limited nowadays. It was attractive back when the top

Which crypto card for Soekris 4801?

2007-01-15 Thread Heinrich Rebehn
Hi all, which crypto cards actually work in a soekris 4801 under OpenBSD? I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. This is a bit confusing: http://www.openbsd.org/i386.html states that the board is supported, so

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Christopher Snell
On 1/15/07, Heinrich Rebehn [EMAIL PROTECTED] wrote: Hi all, which crypto cards actually work in a soekris 4801 under OpenBSD? You're going to have a hard time finding supported Mini-PCI cards, other than the HiFn stuff. Instead, check out the Commel motherboards:

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Christian Ney
Hi Heinrich, I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. This is a bit confusing: http://www.openbsd.org/i386.html states that the board is supported, so does the soekris website. However:

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Stuart Henderson
On 2007/01/15 09:39, Heinrich Rebehn wrote: I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. I only remember seeing posts about problems with encryption in user processes, not the kernel. If it is indeed reliable with

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Heinrich Rebehn
Christian Ney wrote: Hi Heinrich, I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. This is a bit confusing: http://www.openbsd.org/i386.html states that the board is supported, so does the soekris website. However:

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Heinrich Rebehn
Christopher Snell wrote: On 1/15/07, Heinrich Rebehn [EMAIL PROTECTED] wrote: Hi all, which crypto cards actually work in a soekris 4801 under OpenBSD? You're going to have a hard time finding supported Mini-PCI cards, other than the HiFn stuff. Instead, check out the Commel motherboards:

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Stuart Henderson
On 2007/01/15 17:25, Heinrich Rebehn wrote: Thanks for your reply. Performance is of course relative. ATM i am getting 7 Mbit/s via OpenVPN measured with iperf. This is somewhat less than my WLAN can handle (54 Mbit/s) 54 Mbit/s is before protocol overhead; actual throughput is a bit less

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Martin Schröder
2007/1/15, Heinrich Rebehn [EMAIL PROTECTED]: getting 7 Mbit/s via OpenVPN measured with iperf. This is somewhat less than my WLAN can handle (54 Mbit/s) and also less than the speed of the HDD (~70 Mbit/s). So a working VPN1411 would really help. If your HDD does only 70 M_bit_/s, you should

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Christian Ney
No, i don't. I want to use the box as a fileserver at home and have the WLAN traffic encrypted with IPsec or OpenVPN. I do not know how robust both of them are w.r.t to intermittent corrupted mac errors. Unrecoverable hangs during file transfers would of course be quite annyoing. Maybe i will

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Joe
Stuart Henderson wrote: The systems using VIA processors are very much faster even without hardware AES support since they have a better PCI system; the models with accelerated encryption do so by using new CPU instructions, rather than a device which must be accessed over the PCI bus. There's

Crypto card

2006-04-03 Thread Frédéric Nadeau
Summer is coming and for student like me, it mean nothing to do for a while. I usely play around with embedded system but I'd like to put my hand on a PCIe FPGA dev board for the summer. Since I never made use of crypto card(but I know OpenSSH candirectly make use of them) I wonder if it worth

Re: Crypto card

2006-04-03 Thread Theo de Raadt
Basicaly, is the PCI bus a bottle neck for crypto card or is it the chip on the card? No. The scatter gather interface is the bottleneck. This is normally setup a bit like an ethernet or scsi chipset's outstanding operations list, but you need to be able to cut virtual address ranges

Re: Crypto card

2006-04-03 Thread Theo de Raadt
Basicaly, is the PCI bus a bottle neck for crypto card or is it the chip on the card? No. The scatter gather interface is the bottleneck. This is normally setup a bit like an ethernet or scsi chipset's outstanding operations list, but you need to be able to cut virtual address ranges

Cavium crypto card

2006-03-27 Thread Abel Talaverón Estevez
Hi all, Has anybody a 'High performance IPSec and SSL accelerator PCI card with Cavium CN1010' running on OpenBSD? I am looking for a crypto card and it could be an option but it isn't in the hardware supported list in http://www.openbsd.org/i386.html#hardware Thanks! -- Abel Talaversn

Re: Cavium crypto card

2006-03-27 Thread Srebrenko Sehic
Has anybody a 'High performance IPSec and SSL accelerator PCI card with Cavium CN1010' running on OpenBSD? I am looking for a crypto card and it could be an option but it isn't in the hardware supported list in http://www.openbsd.org/i386.html#hardware Some crypto cards are based

Re: Cavium crypto card

2006-03-27 Thread Theo de Raadt
Some crypto cards are based on a supported chip, but are simply re-branded. I took a brief look at the Cavium and it looks like they have their own chips. We don't have support for those. They also state they have drivers for FreeBSD. Perhaps you can talk them into making an BSD-licensed

Re: Crypto card question

2005-11-02 Thread Siju George
On 11/2/05, Theo de Raadt [EMAIL PROTECTED] wrote: I'm setting up an OpenBSD 3.7 box as a VPN/SSH server. It will have a Broadcom 5805 installed to help offload some of the crypto processing. Our employees have laptops with XP loaded and Intel Pro 100/S cards installed. Will the crypto

Re: Crypto card question

2005-11-02 Thread Theo de Raadt
On 11/2/05, Theo de Raadt [EMAIL PROTECTED] wrote: I'm setting up an OpenBSD 3.7 box as a VPN/SSH server. It will have a Broadcom 5805 installed to help offload some of the crypto processing. Our employees have laptops with XP loaded and Intel Pro 100/S cards installed. Will the

Re: Crypto card question

2005-11-02 Thread Siju George
On 11/2/05, Theo de Raadt [EMAIL PROTECTED] wrote: On 11/2/05, Theo de Raadt [EMAIL PROTECTED] wrote: I'm setting up an OpenBSD 3.7 box as a VPN/SSH server. It will have a Broadcom 5805 installed to help offload some of the crypto processing. Our employees have laptops with XP

Re: Crypto card question

2005-11-01 Thread Theo de Raadt
I'm setting up an OpenBSD 3.7 box as a VPN/SSH server. It will have a Broadcom 5805 installed to help offload some of the crypto processing. Our employees have laptops with XP loaded and Intel Pro 100/S cards installed. Will the crypto functionality on these cards work in conjunction with the

Re: Broadcom crypto card

2005-05-26 Thread Steve Shockley
Steven Bowers wrote: I have an opportunity to get a Broadcom BCM95805 card for an attractive price. The supported hardware pages lists a BCM5805, but not a BCM95805. Can anyone confirm if the the BCM95805 is compatible to the BCM5805? This isn't a confirmation, but generally the Broadcom 9