Re: [Wikitech-l] https via GPU?

2011-08-04 Thread Asher Feldman
From the orig post Recent Intel CPU has a fature called AES-NIhttp://en.wikipedia.org/wiki/AES_instruction_set that accelerates AES processing. A CPU with AES-NI can perform 5 to 10 times faster than a CPU without it. We observe that a single core can perform 5 Gbps and 15 Gbps for encryption and

Re: [Wikitech-l] https via GPU?

2011-08-04 Thread Roan Kattouw
On Thu, Aug 4, 2011 at 2:13 AM, Peter Youngmeister p...@wikimedia.org wrote: Hey, I looked at this a little while ago for a previous job. I think that it's a pretty awesome idea, but sadly I could never even find source for their research, much less any reports of it being successfully

Re: [Wikitech-l] https via GPU?

2011-08-04 Thread Ryan Lane
On Wed, Aug 3, 2011 at 11:10 PM, Asher Feldman afeld...@wikimedia.org wrote: From the orig post Recent Intel CPU has a fature called AES-NIhttp://en.wikipedia.org/wiki/AES_instruction_set that accelerates AES processing. A CPU with AES-NI can perform 5 to 10 times faster than a CPU without it.

Re: [Wikitech-l] https via GPU?

2011-08-04 Thread Aryeh Gregor
(Sorry if this winds up getting to the list twice, resending because I think the first got lost in a moderation queue or something.) On Thu, Aug 4, 2011 at 2:10 AM, Asher Feldman afeld...@wikimedia.org wrote: From the orig post Recent Intel CPU has a fature called

Re: [Wikitech-l] https via GPU?

2011-08-04 Thread Asher Feldman
On Thu, Aug 4, 2011 at 10:31 AM, Aryeh Gregor a...@aryeh.name wrote: I was under the impression that the biggest cost in TLS isn't the symmetric encryption for an ongoing connection, it's the asymmetric encryption for the connection setup. If so, AES acceleration isn't going to help with the

Re: [Wikitech-l] https via GPU?

2011-08-04 Thread Ashar Voultoiz
On 04/08/11 13:46, Roan Kattouw wrote: snip I talked to Maarten Dammers at Wikimania yesterday, and he mentioned that he's using some sort of netapp (a load balancing appliance) at work that has SSL termination built in, in hardware. It sounded pretty cool, but he also warned those things are

Re: [Wikitech-l] https via GPU?

2011-08-03 Thread Peter Youngmeister
Hey, I looked at this a little while ago for a previous job. I think that it's a pretty awesome idea, but sadly I could never even find source for their research, much less any reports of it being successfully deployed in the wild, which made me sad. Hopefully they'll release it and then some

[Wikitech-l] https via GPU?

2011-07-29 Thread Magnus Manske
Just saw this: http://shader.kaist.edu/sslshader/ As we move to offer real https access, maybe this could help keeping the CPU cost down? ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org

Re: [Wikitech-l] https via GPU?

2011-07-29 Thread Platonides
Magnus Manske wrote: Just saw this: http://shader.kaist.edu/sslshader/ As we move to offer real https access, maybe this could help keeping the CPU cost down? Our servers don't have a GPU, so that would need a hardware upgrade. ___ Wikitech-l

Re: [Wikitech-l] https via GPU?

2011-07-29 Thread Jon Davis
On Fri, Jul 29, 2011 at 11:29, Platonides platoni...@gmail.com wrote: Our servers don't have a GPU, so that would need a hardware upgrade. Yes, but if large scale SSL deployment increased CPU usage to the point of necessitating new hardware... the cost could be reduced by purchased GPU's for

Re: [Wikitech-l] https via GPU?

2011-07-29 Thread Brion Vibber
On Fri, Jul 29, 2011 at 11:53 AM, Jon Davis w...@konsoletek.com wrote: On Fri, Jul 29, 2011 at 11:29, Platonides platoni...@gmail.com wrote: Our servers don't have a GPU, so that would need a hardware upgrade. Yes, but if large scale SSL deployment increased CPU usage to the point of