Re: [Openvpn-users] [Openvpn-devel] Openvpn is not working with hardware encryption enabled CPU.
Hi, On Thu, Jul 30, 2015 at 12:55:00PM +0530, Rahul Arora wrote: *Openvpn --version* OpenVPN 2.1.3 arm-fsl-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Jul 29 2015 This is, uh, ancient. 2.3.7 is the current stable release. (It might or might not related, but we're certainly not going back to 2.2 or even 2.1 releases to debug anything. OpenVPN *should* use the crypto accelerator just fine, if OpenSSL can use it - if you need to use an OpenSSL engine, tell OpenVPN with --engine yourengine. It might not make an overwhelming difference in speed if you use the wrong crypto algorithms - like, your hardware accelerates 3DES and you use --cipher blowfish...) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgp0bgtl4SisJ.pgp Description: PGP signature -- ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
[Openvpn-users] Openvpn is not working with hardware encryption enabled CPU.
Hi Team, We have a hardware encryption enabled CPU,we want to test how does its hardware encryption engine will improve Openvpn performance. We are getting outstanding improved performance in openssl, from 48 times up to 100 times in openssl encryption test with cryptodev engine supported. -- ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] [Openvpn-devel] Openvpn is not working with hardware encryption enabled CPU.
Hi Thanks for the reply. I am already using --engine cryptodev in the configuration file. I am using aes-128-cbc cipher algorithm and it is supported in my hardware as i am running openssl speed test using these ciphers only and in case of openssl speed test throughput is increasing but with openvpn it is not so. On Thu, Jul 30, 2015 at 5:18 PM, Gert Doering g...@greenie.muc.de wrote: Hi, On Thu, Jul 30, 2015 at 12:55:00PM +0530, Rahul Arora wrote: *Openvpn --version* OpenVPN 2.1.3 arm-fsl-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Jul 29 2015 This is, uh, ancient. 2.3.7 is the current stable release. (It might or might not related, but we're certainly not going back to 2.2 or even 2.1 releases to debug anything. OpenVPN *should* use the crypto accelerator just fine, if OpenSSL can use it - if you need to use an OpenSSL engine, tell OpenVPN with --engine yourengine. It might not make an overwhelming difference in speed if you use the wrong crypto algorithms - like, your hardware accelerates 3DES and you use --cipher blowfish...) gert -- USENET is *not* the non-clickable part of WWW! // www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de -- ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Openvpn is not working with hardware encryption enabled CPU.
Sorry for my last incomplete email.I sent it by mistake.Here is the complete description. We have a hardware encryption enabled CPU,we want to test how does its hardware encryption engine will improve Openvpn performance. *We are getting outstanding improved performance in openssl*, from 48 times up to 100 times in openssl encryption test with cryptodev engine supported. The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes aes-128-cbc 12386.33k41985.48k 312989.87k 823944.53k infk Then *while running the openvpn between 2 machine's* (one for server, one for client, and both side cipher used aes-128-cbc), we can get the Openvpn tunnel working, but when we tried to use iperf to test its traffic throughput capacity, the throughput of Iperf shows only *16Mbits/sec with cryptodev hardware engine* !!!, it is *even low than without cryptodev hardware engine enabled(its around 80Mbits/sec)*. If some body knows this issue,can you please point me to the source code path where i can tweak something to improve performance with cryptodev case. I am using below versions of the sources. *OpenSSL 1.0.1g 7 Apr 2014* *Openvpn --version* OpenVPN 2.1.3 arm-fsl-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Jul 29 2015 Originally developed by James Yonan Copyright (C) 2002-2010 OpenVPN Technologies, Inc. sa...@openvpn.net *Cryptodev 1.6 version* Please feel free to revert if any information is missing. Thanks for the help. On Thu, Jul 30, 2015 at 12:33 PM, Rahul Arora rahul1991.ar...@gmail.com wrote: Hi Team, We have a hardware encryption enabled CPU,we want to test how does its hardware encryption engine will improve Openvpn performance. We are getting outstanding improved performance in openssl, from 48 times up to 100 times in openssl encryption test with cryptodev engine supported. -- ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
