This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Offloading Encryption (IPSec, HTTPS)

One of our clients has hit us up with a requirement to send https traffic from our site to theirs via a VPN tunnel. Casting aside the potential to debate the practicality of this solution, I'm looking for some information regarding Astaro's ability to offload encryption (IPSec for VPN, HTTPS for web security) via their offered hardware appliances or via supported third-party cards.

I wasn't able to find this information via a quick search of the forums. I'm hoping someone here has experience with this.

This thread was automatically locked due to age.

Parents

0 BarryG over 13 years ago

Hi, 50-75Mbps is nothing for a modern CPU, even with 1 CPU core.

BTW, AES is much faster than the other IPSEC crypto algorithms, even without offloading.

Your HTTPS load would be more of a concern, but I'd still think 24 CPU cores should more than handle it.

Most (all?) of the SSL accelerator cards are obsolete these days as CPUs have gotten faster and have surpassed most or all of the accelerators (I looked into this last year).
Astaro used to have some sort of offloading processor in the higher-end appliances, but again, I believe they are obsolete.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 13 years ago

Hi, 50-75Mbps is nothing for a modern CPU, even with 1 CPU core.

BTW, AES is much faster than the other IPSEC crypto algorithms, even without offloading.

Your HTTPS load would be more of a concern, but I'd still think 24 CPU cores should more than handle it.

Most (all?) of the SSL accelerator cards are obsolete these days as CPUs have gotten faster and have surpassed most or all of the accelerators (I looked into this last year).
Astaro used to have some sort of offloading processor in the higher-end appliances, but again, I believe they are obsolete.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data