Am 26.11.20 um 10:41 schrieb Tony He: > Hi Arne, > >>Since the original thread was not on the mailing list I am missing your >>goal but if your crypto acelator already works with OpenSSL, then it >>will also work with the "normal" OpenVPN > > Yes, it wokrs with "normal" OpenVPN(OpenVPN2), but according to the test > result, it's still not fast(about 60Mbps). > The bottleneck is not encryption operation any more. It comes from the > switch of user space and kernel space in the OpenVPN2, > which makes the poor CPU of embedded device very busy. That's why we > need OpenVPN3 running in the kernel space.
What numbers are we are talking in crypto speed? Could you provide from your "poor" device: openssl speed -evp aes-128-cbc openssl speed -evp aes-128-gcm openssl speed -evp aes-128-ccm openssl speed -evp sha1 openssl speed -evp chacha20-poly1305 I want to what difference/gain in terms of raw crypto speed we are talking here. Arne _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
