To add to the test data, in the 0.7 branch of AstLinux. http://www.astlinux.org/
http://astlinux.svn.sourceforge.net/viewvc/astlinux/branches/0.7/ All tests on a net5501-70, Linux Kernel 2.6.27.xx, these modules are loaded: -- geode-aes ocf cryptosoft cryptodev -- # modprobe -r cryptosoft # openssl speed -evp aes-128-cbc -- type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes aes-128-cbc 36964.11k 41779.20k 42427.73k 43808.58k 43897.02k -- # modprobe cryptosoft # openssl speed -evp aes-128-cbc -engine cryptodev -- type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes aes-128-cbc 68509.33k 197297.60k 856507.73k 3002009.60k 7761920.00k -- Now for the REAL world, and OpenVPN on a net5501-70 1) No acceleration, AES-128-CBC, about 15 Mbits/sec (ie. "cryptosoft" module not loaded) 2) CryptoDEV, AES-128-CBC, about 20 Mbits/sec (ie. "cryptosoft" module loaded) 3) No acceleration, No Encryption, about 26 Mbits/sec It was over two years ago when I did the OpenVPN tests, so don't ask me how I did it, but assume it was 'fair'. :-) Lonnie On Apr 20, 2011, at 10:13 AM, Guillaume Filion wrote: > As a follow-up, I talked with Andreas Steinel who did compile OCF-Linux > on his net5501 back in the summer on 2008 (kernel 2.6.25.10). > > He didn't have a vpn1411 card but the numbers for the geode aes > acceleration are very impressive (likely too good to be true -- Andreas > told me that he wasn't able to see this speedup on his OpenVPN setup): > > # openssl engine > (cryptodev) BSD cryptodev engine > (padlock) VIA PadLock (no-RNG, no-ACE) > (dynamic) Dynamic engine loading support > > # openssl speed -evp aes-128-cbc -engine dynamic > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > aes-128-cbc 7091.41k 10286.25k 11557.60k 12058.76k > 12157.67k > > # openssl speed -evp aes-128-cbc > type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 > bytes > aes-128-cbc 65098.13k 92264.00k 410205.87k 5833523.20k > 7599923.20k > > Here are more infos from Andreas: > ----- > I also had to patch openssl and wrote the following md5sums down: > > d3afc44792abe1fbbf8281ffa6fbcbce openssl_0.9.8g-10.1.diff.gz > acf70a16359bf3658bdfb74bda1c4419 openssl_0.9.8g.orig.tar.gz > 749305c08ddeeb45df7f3c754c4a1eff openssl-0.9.8g.patch > (Aus dem ocf-linux-20080704 Ordner) > > I built the following debian packages out of it: > libcrypto0.9.8-udeb_0.9.8g-10.2_i386.udeb > libssl0.9.8_0.9.8g-10.2_i386.deb > libssl0.9.8-dbg_0.9.8g-10.2_i386.deb > libssl-dev_0.9.8g-10.2_i386.deb > openssl_0.9.8g-10.2_i386.deb > _______________________________________________ > Soekris-tech mailing list > [email protected] > http://lists.soekris.com/mailman/listinfo/soekris-tech > > _______________________________________________ Soekris-tech mailing list [email protected] http://lists.soekris.com/mailman/listinfo/soekris-tech
