recommended SSL-friendly crypto accelerator

Poul-Henning Kamp phk at phk.freebsd.dk
Thu Apr 8 08:18:39 PDT 2004


In message <20040408144322.GA83448 at bewilderbeast.blackhelicopters.org>, "Michae
l W. Lucas" writes:
>On Thu, Apr 08, 2004 at 04:28:37PM +0200, Poul-Henning Kamp wrote:
>> >>Look at VPN14x1 from www.soekris.com, it's darn cheap too.
>
>Thanks, phk!
>
>For $79, it's cheap enough that I could put a whole stack of them in a
>machine.  Can FreeBSD take advantage of multiple cards like that?

I think so, but I am not sure the code currently does load-sharing
or just "try to find a card which can do this job" sharing.

Maybe sam@ would know, you should probably ask him.

>(Yes, that's a serious concern; I'm looking at 15,000 simultaneous
>users on a SSL Web site, and would prefer to avoid spending the big
>bucks on a so-called "hardware SSL accelerator.")

Whee :-)

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.


More information about the freebsd-security mailing list