Hmm, seems like there isn't much interest in harnessing Astaro VPN capabilities.
Came across another ipsec acceleration product http://www.cavium.com/boards.htm if we were to stick this into our system, would Astaro be able to harness it?
Looking at some posting on Freeswan.org , it seems to imply that there's some kind of support.
------------------------ Hardware accelerators could take performance well beyond what FreeS/WAN can do in software (discussed here ). Here is some discussion off the IETF IPsec list, October 2001:
... Currently shipping chips deliver, 600 mbps throughput on a single stream of 3DES IPsec traffic. There are also chips that use multiple cores to do 2.4 gbps. We (Cavium) and others have announced even faster chips. ... Mid 2002 versions will handle at line rate (OC48 and OC192) IPsec and SSL/TLS traffic not only 3DES CBC but also AES and arc4.The patches to date support chips that have been in production for some time, not the state-of-the-art latest-and-greatest devices described in that post. However, they may still outperform software and they almost certainly reduce CPU overhead --------------------------------------
Hmm, seems like there isn't much interest in harnessing Astaro VPN capabilities.
Came across another ipsec acceleration product http://www.cavium.com/boards.htm if we were to stick this into our system, would Astaro be able to harness it?
Looking at some posting on Freeswan.org , it seems to imply that there's some kind of support.
------------------------ Hardware accelerators could take performance well beyond what FreeS/WAN can do in software (discussed here ). Here is some discussion off the IETF IPsec list, October 2001:
... Currently shipping chips deliver, 600 mbps throughput on a single stream of 3DES IPsec traffic. There are also chips that use multiple cores to do 2.4 gbps. We (Cavium) and others have announced even faster chips. ... Mid 2002 versions will handle at line rate (OC48 and OC192) IPsec and SSL/TLS traffic not only 3DES CBC but also AES and arc4.The patches to date support chips that have been in production for some time, not the state-of-the-art latest-and-greatest devices described in that post. However, they may still outperform software and they almost certainly reduce CPU overhead --------------------------------------
