Re: ssl accelerator cards and jail?

2009-07-24 Thread Michael Scheidell



Brian A. Seklecki wrote:

On Wed, 2009-07-08 at 16:45 -0400, Michael Scheidell wrote:
  

has anyone done any work with hardware ssl accelerator cards and freebsd?




I'm pretty sure.  Because it is a;; one kernel, the userland-kernel
sysctls just fall through to the host.

I've been meaning to try the VMWare ESXi 4.0 PCI card passthrough
feature.

Let me pass my Sun Crypto 1000 (BCM5921/23) through to a Jailhost
FreeBSD 7.2, then try it within a jail.  Should be quite a head trip.

  

thanks.  maybe I'll look into one of those and give it a try on 7.1
(worries me that 7.2 has a shorted lifespan than 7.1...)


--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
 *| *SECNAP Network Security Corporation

   * Certified SNORT Integrator
   * 2008-9 Hot Company Award Winner, World Executive Alliance
   * Five-Star Partner Program 2009, VARBusiness
   * Best Anti-Spam Product 2008, Network Products Guide
   * King of Spam Filters, SC Magazine 2008


_
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/

_
  
___

freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to freebsd-jail-unsubscr...@freebsd.org


Re: ssl accelerator cards and jail?

2009-07-24 Thread Brian A. Seklecki
On Wed, 2009-07-08 at 16:45 -0400, Michael Scheidell wrote:
 has anyone done any work with hardware ssl accelerator cards and freebsd?
 

I'm pretty sure.  Because it is a;; one kernel, the userland-kernel
sysctls just fall through to the host.

I've been meaning to try the VMWare ESXi 4.0 PCI card passthrough
feature.

Let me pass my Sun Crypto 1000 (BCM5921/23) through to a Jailhost
FreeBSD 7.2, then try it within a jail.  Should be quite a head trip.

 ~BAS

 specifically, freebsd 7.1 amd64?
 
 and, is it transparent in 'jail' so all jailed servers can use the one card?
 
 


___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to freebsd-jail-unsubscr...@freebsd.org


Re: ssl accelerator cards and jail?

2009-07-24 Thread Brian A. Seklecki
On Fri, 2009-07-24 at 12:11 -0400, Michael Scheidell wrote:
 thanks.  maybe I'll look into one of those and give it a try on 7.1
 (worries me that 7.2 has a shorted lifespan than 7.1...)

That's by design per the releng document.

Hey, my ESXi 4.0 machine is PCI-Express only.  My Broadcom cards are
32bit PCI-X.  I had a PCI-E but had to return it as a demo.

Give me a few days to hack some testing together.   ~BAS


___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to freebsd-jail-unsubscr...@freebsd.org