[Soekris] Hardware crypto acceleration on Debian

Lonnie Abelbeck lists at lonnie.abelbeck.com
Wed Apr 20 16:51:11 UTC 2011


To add to the test data, in the 0.7 branch of AstLinux.
http://www.astlinux.org/

http://astlinux.svn.sourceforge.net/viewvc/astlinux/branches/0.7/

All tests on a net5501-70, Linux Kernel 2.6.27.xx, these modules are loaded:
--
geode-aes
ocf
cryptosoft
cryptodev
--

# modprobe -r cryptosoft
# openssl speed -evp aes-128-cbc
--
type             16 bytes     64 bytes    256 bytes   1024 bytes   2048 bytes
aes-128-cbc      36964.11k    41779.20k    42427.73k    43808.58k    43897.02k
--

# modprobe cryptosoft
# openssl speed -evp aes-128-cbc -engine cryptodev
--
type             16 bytes     64 bytes    256 bytes   1024 bytes   2048 bytes
aes-128-cbc      68509.33k   197297.60k   856507.73k  3002009.60k  7761920.00k
--

Now for the REAL world, and OpenVPN on a net5501-70

1) No acceleration, AES-128-CBC, about 15 Mbits/sec (ie. "cryptosoft" module not loaded)

2) CryptoDEV, AES-128-CBC, about 20 Mbits/sec (ie. "cryptosoft" module loaded)

3) No acceleration, No Encryption, about 26 Mbits/sec

It was over two years ago when I did the OpenVPN tests, so don't ask me how I did it, but assume it was 'fair'. :-)

Lonnie



On Apr 20, 2011, at 10:13 AM, Guillaume Filion wrote:

> As a follow-up, I talked with Andreas Steinel who did compile OCF-Linux
> on his net5501 back in the summer on 2008 (kernel 2.6.25.10).
> 
> He didn't have a vpn1411 card but the numbers for the geode aes
> acceleration are very impressive (likely too good to be true -- Andreas
> told me that he wasn't able to see this speedup on his OpenVPN setup):
> 
> # openssl engine
> (cryptodev) BSD cryptodev engine
> (padlock) VIA PadLock (no-RNG, no-ACE)
> (dynamic) Dynamic engine loading support
> 
> # openssl speed -evp aes-128-cbc -engine dynamic
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192
> bytes
> aes-128-cbc       7091.41k    10286.25k    11557.60k    12058.76k
> 12157.67k
> 
> # openssl speed -evp aes-128-cbc
> type             16 bytes     64 bytes    256 bytes   1024 bytes   2048
> bytes
> aes-128-cbc      65098.13k    92264.00k   410205.87k  5833523.20k
> 7599923.20k
> 
> Here are more infos from Andreas:
> -----
> I also had to patch openssl and wrote the following md5sums down:
> 
> d3afc44792abe1fbbf8281ffa6fbcbce  openssl_0.9.8g-10.1.diff.gz
> acf70a16359bf3658bdfb74bda1c4419  openssl_0.9.8g.orig.tar.gz
> 749305c08ddeeb45df7f3c754c4a1eff  openssl-0.9.8g.patch
> (Aus dem ocf-linux-20080704 Ordner)
> 
> I built the following debian packages out of it:
> libcrypto0.9.8-udeb_0.9.8g-10.2_i386.udeb
> libssl0.9.8_0.9.8g-10.2_i386.deb
> libssl0.9.8-dbg_0.9.8g-10.2_i386.deb
> libssl-dev_0.9.8g-10.2_i386.deb
> openssl_0.9.8g-10.2_i386.deb
> _______________________________________________
> Soekris-tech mailing list
> Soekris-tech at lists.soekris.com
> http://lists.soekris.com/mailman/listinfo/soekris-tech
> 
> 



More information about the Soekris-tech mailing list