Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Stuart Henderson
--On 16 October 2005 11:04 -0400, Mike wrote: [3] Check carefully, many of these boards only support RNG Very carefully - you can't just go by model number; this was on undeadly: "VIA is annoying because they don't say which particular CPU is on those EPIA mobos. The reason I'm saying this

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Reyk Floeter
On Sun, Oct 16, 2005 at 11:04:17AM -0400, Mike wrote: > VPN at fairly high speeds. I'm not sure the hardware acceleration on > the VIA boards (called ACE, padlock, etc.) is supported for IPSec [1,2]. > I got these results: > > Pair of EPIA PD1 with RNG and AES [3]: > AES SHA: 24 Mbps > BLF

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Mike
Stuart Henderson wrote: --On 13 October 2005 17:50 -0400, Andrew Atrens wrote: >> Cpu is a Geode1100 - doing 10Mb/s IPsec has it maxed out :) If you want a low-ish power cpu for running crypto, the newer c3/eden are better. I, too, was looking for a low power, low cost platform for doing

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-16 Thread Christian Weisgerber
jared r r spiegel <[EMAIL PROTECTED]> wrote: > it's easy to be an armchair quarterback, and perhaps i don't > know the whole story, but it'd be nice if soren-et-al. appeared > to not be resting on the laurels of selling a boat load of > 4501/4801s over the past few years and instead was p

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread jared r r spiegel
On Thu, Oct 13, 2005 at 04:07:00PM -0600, Theo de Raadt wrote: > > Even though the card is detected, I'm not seeing any boost in > > IPsec performance. > > > Cpu is a Geode1100 - doing 10Mb/s IPsec has it maxed out :) > > The cpu is unable to feed the crypto card fast enough. > > You would think

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread Stuart Henderson
--On 13 October 2005 17:50 -0400, Andrew Atrens wrote: I know in FreeBSD/DragonFly I have a couple of tools to check to see if it's being engaged - hifnstats and cryptostats (in /usr/src/tools/tools/crypto), but I'm not sure if the equivalent exists for OpenBSD. You'll see something in the int

Re: how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread Theo de Raadt
> Even though the card is detected, I'm not seeing any boost in > IPsec performance. > Cpu is a Geode1100 - doing 10Mb/s IPsec has it maxed out :) The cpu is unable to feed the crypto card fast enough. You would think that doing crypto operations, especially 3DES is a lot of work. And it is. B

how to tell if I getting anything out of my hifn1411 card

2005-10-13 Thread Andrew Atrens
Even though the card is detected, I'm not seeing any boost in IPsec performance. I'm getting 10Mb/s using 3des. The raw speed (no ipsec) of the link is around 25Mb/s. This measured with netstrain. Here's what dmesg says - hifn0 at pci0 dev 13 function 0 "Hifn 7955/7954" rev 0x00: LZS 3DES ARC4