Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 1399 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VIA C7 with PadLock crypto for IPsec support?

toreolsen
Does Astaro support the expanced hardware VIA PadLock crypto engine that was introduced with the VIA C7 processor?

I understand the kernel must be 2.6.18r2 onwards and that a patch is needed to take advantage of the expanded crypto engine in VIA C7. (see http://www.logix.cz/michal/devel/padlock/ ). While VIA C3 is listed as compatible processor in the Astaro Hardware Compatibility List, VIA C7 is not. 

Has anyone tried using VIA C7 with Astaro?
Is there reason to believe that the VIA C7 will be substantially faster for IPsec VPN than C3 processor at same frequency because of the new crypto engine?

Embarrased to admit, but I don't know what version the most recent kernel of Astaro is?

Any feedback would be greatly appreciated?

Cheers,
Tore


This thread was automatically locked due to age.
Parents
  • 0
    The engine used here is strongSwan, but I don't know if those are on or off in the configuration.

    Cheers - Bob
  • 0 in reply to BAlfson
    From the Strongswan mailing list:

    The actual payload traffic is completely handled in the kernel. There is a stable padlock module in the vanilla kernel [...]. Try to load the padlock-aes/padlock-sha kernel modules. They will be used for AES encryption/SHA1 MACs automatically when loaded. You will get a significant performance boost...


    So I guess it's using them if loaded ...
Reply
  • 0 in reply to BAlfson
    From the Strongswan mailing list:

    The actual payload traffic is completely handled in the kernel. There is a stable padlock module in the vanilla kernel [...]. Try to load the padlock-aes/padlock-sha kernel modules. They will be used for AES encryption/SHA1 MACs automatically when loaded. You will get a significant performance boost...


    So I guess it's using them if loaded ...
Children
No Data