<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">No, I didn't see much improved performance.<div class="">Currently, I use OpenVPN-NL, because it uses PolarSSL and is stripped for insecure options.. There is no HW acceleration in PolarSSL. AFAIR almost same performance as OpenSSL libs.</div><div class=""><br class=""></div><div class="">scp in vpn tunnel: you can guess the result.</div><div class=""><br class=""></div><div class="">Teco</div><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">Op 7 apr. 2015, om 17:51 heeft Will Tatam <<a href="mailto:will.tatam@red61.com" class="">will.tatam@red61.com</a>> het volgende geschreven:</div><br class="Apple-interchange-newline"><div class="">
<meta content="text/html; charset=windows-1252" http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
Hi Teco<br class="">
<br class="">
Did you ever manage to resolve these issues to get the HW
acceleration working with openssl 1.0.1 ? <br class="">
<br class="">
Will<br class="">
<br class="">
<div class="moz-cite-prefix">On 27/07/12 15:51, Teco Boot wrote:<br class="">
</div>
<blockquote cite="mid:CA06C012-8967-49FE-B960-A0BAA2742413@inf-net.nl" type="cite" class="">
<pre wrap="" class="">I tried patched OpenSSL with OpenVPN.
On daily, I had problems getting it to work. In Wheezy, libssl /
openssl is updated to 1.0.1. No OCF-Linux patches here (yet).
OpenSSL 1.0.1 has better support for HW acceleration, but nothing
in place for geode-aes. The AF_ALG didn't work, either, I can give
it a try later.
I tried the patched OpenSSL from Squeeze (0.9.8o-4squeeze1-ocf1).
Because many dependencies with libssl1.0.1, it failed.
On Voyage 0.8.0, I can use the 0.9.8o-4squeeze1-ocf1, with OpenVPN
using cryptodev, On Alix LX800. Performance tests did not show a
better throughput (about 10Mbps, using iperf).
With scp I get easily 18Mbps.
My findings are disappointing. Lack of support of OCF-Linux in newer
OpenSSL releases, and bad performance. I expect AF_ALG has even worse
performance than OCF-Linux.
Other, more positive outcomes?
Teco
Op 21 jul. 2012, om 21:01 heeft Will Tatam het volgende geschreven:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">Hi John
After a bit of messing about, I did manage to get them to build.
What's the score with getting OCF support back into the main voyage repo ?
Will
On 07/20/2012 07:45 PM, John Coltrane wrote:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">Hi Will,
I'm sorry. The .deb's I have built are lost :-(
John
On 07/20/2012 04:36 PM, Will Tatam wrote:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">Hi John
Any chance you could email me or post online somewhere the packages
you managed to build ?
Will
On 07/19/2012 03:31 PM, John Coltrane wrote:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">Hello Will,
I had the same question some months ago. Michael Fung replied, that he
has an article in his wiki dealing with this topic:
<a class="moz-txt-link-freetext" href="http://www.3open.org/d/voyage/enable_hardware_encryption?&#for_voyage_075">http://www.3open.org/d/voyage/enable_hardware_encryption?&#for_voyage_075</a>
BTW, in x86 OpenWRT is full OCF support incorporated in the recent
10.03.1 release.
cheers
On 07/19/2012 03:31 PM, Will Tatam wrote:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">In the past voyage distributed their own version of openssl with OCF
enabled, (e.g <a class="moz-txt-link-freetext" href="http://uk.voyage.hk/dists/0.6/openssl/">http://uk.voyage.hk/dists/0.6/openssl/</a>) but for voyage
0.8 this support appears to be missing
Could someone please build a OCF enabled version of openssl for voyage
0.8 please
Will Tatam
_______________________________________________
Voyage-linux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Voyage-linux@list.voyage.hk">Voyage-linux@list.voyage.hk</a>
<a class="moz-txt-link-freetext" href="http://list.voyage.hk/mailman/listinfo/voyage-linux">http://list.voyage.hk/mailman/listinfo/voyage-linux</a>
</pre>
</blockquote>
<pre wrap="" class="">_______________________________________________
Voyage-linux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Voyage-linux@list.voyage.hk">Voyage-linux@list.voyage.hk</a>
<a class="moz-txt-link-freetext" href="http://list.voyage.hk/mailman/listinfo/voyage-linux">http://list.voyage.hk/mailman/listinfo/voyage-linux</a>
</pre>
</blockquote>
<pre wrap="" class="">On 07/19/2012 03:31 PM, John Coltrane wrote:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">Hello Will,
I had the same question some months ago. Michael Fung replied, that he
has an article in his wiki dealing with this topic:
<a class="moz-txt-link-freetext" href="http://www.3open.org/d/voyage/enable_hardware_encryption?&#for_voyage_075">http://www.3open.org/d/voyage/enable_hardware_encryption?&#for_voyage_075</a>
BTW, in x86 OpenWRT is full OCF support incorporated in the recent
10.03.1 release.
cheers
On 07/19/2012 03:31 PM, Will Tatam wrote:
</pre>
<blockquote type="cite" class="">
<pre wrap="" class="">In the past voyage distributed their own version of openssl with OCF
enabled, (e.g <a class="moz-txt-link-freetext" href="http://uk.voyage.hk/dists/0.6/openssl/">http://uk.voyage.hk/dists/0.6/openssl/</a>) but for voyage
0.8 this support appears to be missing
Could someone please build a OCF enabled version of openssl for voyage
0.8 please
Will Tatam
_______________________________________________
Voyage-linux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Voyage-linux@list.voyage.hk">Voyage-linux@list.voyage.hk</a>
<a class="moz-txt-link-freetext" href="http://list.voyage.hk/mailman/listinfo/voyage-linux">http://list.voyage.hk/mailman/listinfo/voyage-linux</a>
</pre>
</blockquote>
<pre wrap="" class="">_______________________________________________
Voyage-linux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Voyage-linux@list.voyage.hk">Voyage-linux@list.voyage.hk</a>
<a class="moz-txt-link-freetext" href="http://list.voyage.hk/mailman/listinfo/voyage-linux">http://list.voyage.hk/mailman/listinfo/voyage-linux</a>
</pre>
</blockquote>
<pre wrap="" class=""></pre>
</blockquote>
</blockquote>
<pre wrap="" class="">
_______________________________________________
Voyage-linux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Voyage-linux@list.voyage.hk">Voyage-linux@list.voyage.hk</a>
<a class="moz-txt-link-freetext" href="http://list.voyage.hk/mailman/listinfo/voyage-linux">http://list.voyage.hk/mailman/listinfo/voyage-linux</a>
</pre>
</blockquote>
<pre wrap="" class="">
_______________________________________________
Voyage-linux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Voyage-linux@list.voyage.hk">Voyage-linux@list.voyage.hk</a>
<a class="moz-txt-link-freetext" href="http://list.voyage.hk/mailman/listinfo/voyage-linux">http://list.voyage.hk/mailman/listinfo/voyage-linux</a>
</pre>
</blockquote>
<br class="">
<br class="">
<div class="moz-signature"><span style="font-size: 12px;" class=""></span></div>
</div>
</div></blockquote></div><br class=""></div></body></html>