Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Christian Weisgerber
jared r r spiegel [EMAIL PROTECTED] wrote: it's easy to be an armchair quarterback, and perhaps i don't know the whole story, but it'd be nice if soren-et-al. appeared to not be resting on the laurels of selling a boat load of 4501/4801s over the past few years and instead was

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Mike
Stuart Henderson wrote: --On 13 October 2005 17:50 -0400, Andrew Atrens wrote: Cpu is a Geode1100 - doing 10Mb/s IPsec has it maxed out :) If you want a low-ish power cpu for running crypto, the newer c3/eden are better. I, too, was looking for a low power, low cost platform for doing

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Reyk Floeter
On Sun, Oct 16, 2005 at 11:04:17AM -0400, Mike wrote: VPN at fairly high speeds. I'm not sure the hardware acceleration on the VIA boards (called ACE, padlock, etc.) is supported for IPSec [1,2]. I got these results: Pair of EPIA PD1 with RNG and AES [3]: AES SHA: 24 Mbps BLF MD5:

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Stuart Henderson
--On 16 October 2005 11:04 -0400, Mike wrote: [3] Check carefully, many of these boards only support RNG Very carefully - you can't just go by model number; this was on undeadly: VIA is annoying because they don't say which particular CPU is on those EPIA mobos. The reason I'm saying

how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread Andrew Atrens
Even though the card is detected, I'm not seeing any boost in IPsec performance. I'm getting 10Mb/s using 3des. The raw speed (no ipsec) of the link is around 25Mb/s. This measured with netstrain. Here's what dmesg says - hifn0 at pci0 dev 13 function 0 Hifn 7955/7954 rev 0x00: LZS 3DES ARC4

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread Theo de Raadt
Even though the card is detected, I'm not seeing any boost in IPsec performance. Cpu is a Geode1100 - doing 10Mb/s IPsec has it maxed out :) The cpu is unable to feed the crypto card fast enough. You would think that doing crypto operations, especially 3DES is a lot of work. And it is. But

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread Stuart Henderson
--On 13 October 2005 17:50 -0400, Andrew Atrens wrote: I know in FreeBSD/DragonFly I have a couple of tools to check to see if it's being engaged - hifnstats and cryptostats (in /usr/src/tools/tools/crypto), but I'm not sure if the equivalent exists for OpenBSD. You'll see something in the

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread jared r r spiegel
On Thu, Oct 13, 2005 at 04:07:00PM -0600, Theo de Raadt wrote: Even though the card is detected, I'm not seeing any boost in IPsec performance. Cpu is a Geode1100 - doing 10Mb/s IPsec has it maxed out :) The cpu is unable to feed the crypto card fast enough. You would think that