Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1078 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec encryption acceleration

Bryan Rapp
Just curious to find out if ASL supports offloading IPSec encryption to a hardware acceleration card.  I realize this requires support from FreeSwan as well, but I'm looking to increase the 33Mbps throughput as stated in the technical specifications.  To what level will a faster CPU/more RAM affect this spec?

Thanks,
Bryan


This thread was automatically locked due to age.
Parents
  • 0
    Well start with the Freeswan mailing list and ask there (check it over at www.freeswan.org).  Rainbow and Chrysalis make very good cards.

    INTEL and 3COM make NICs with excelleration builtin.

    CPU is what you need to do the raw crypto.  Of course choosing a cipher suite that works better in software than 3DES can really help too (like CAST and of course AES when available).
  • 0 in reply to Bob M
    I left NCipher of the list of excellerator cards.  This is a good alternative that want to buy EU.
Reply Children
  • 0 in reply to Bob M
    Hi there, in the new Astaro Version 3.2 we support the AES Encryption algorithm with 128bit keys.

    We get a performace of 70MBit/s using a 1 GHz Pentium III Machine.

    Is that enough?

    I suggest it scales even furthur if you are using faster CPUs like P4 2.4GHz.

    Kind regards
    Gert