看板FB_security
標 題Re: recommended SSL-friendly crypto accelerator
發信站NCTU CSIE FreeBSD Server (Fri Apr 9 04:17:05 2004)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
In my completely unscientific tests just now before heading off to bed,
The 4.9 kernel without hifn in it, apache-ssl is clearly using main cpu
under artificial heavy load.
Put back in hifn, same test, cpu is hovering at 90% idle, and apache-ssl
is cranking away.
This is with the Soekris 14xx card, reported as:
hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
I know the 7955 is the latest chipset and supports more than the older
7951 cards.
:
: I can second/confirm Mike's observations here.
:
: I've got a pair of HI/FN 7951 cards which gets used by SSH if I select
: 3DES, but there is no sign that Apache attempts to use it for either
: the public-key RSA/DSA crypto during HTTPS session startup, nor later
: for the symmetric crypto.
:
: --
: -Chuck
:
: _______________________________________________
--
Andrew
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"