recommended SSL-friendly crypto accelerator
andy at lewman.com
andy at lewman.com
Thu Apr 8 21:41:35 PDT 2004
In my completely unscientific tests just now before heading off to bed,
The 4.9 kernel without hifn in it, apache-ssl is clearly using main cpu
under artificial heavy load.
Put back in hifn, same test, cpu is hovering at 90% idle, and apache-ssl
is cranking away.
This is with the Soekris 14xx card, reported as:
hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
I know the 7955 is the latest chipset and supports more than the older
7951 cards.
:
: I can second/confirm Mike's observations here.
:
: I've got a pair of HI/FN 7951 cards which gets used by SSH if I select
: 3DES, but there is no sign that Apache attempts to use it for either
: the public-key RSA/DSA crypto during HTTPS session startup, nor later
: for the symmetric crypto.
:
: --
: -Chuck
:
: _______________________________________________
--
Andrew
More information about the freebsd-security
mailing list