On Wed, 2005-08-03 at 15:29 +0200, Massimo wrote: > I've made up a test LAN built on two mini-ITX Via C3 based board to test > the AES encryption functionality of this CPU on a real setup. > > I've used flashboot 0.7.2 from Damien simply for a matter of time (I've > some flash card already configured) and since it seems to me a very good > product, the kernel is GENERIC-MD
I made a similar post recently [1]. One difference was that I was using regular 3.7-release. > Now the result. > Iperf with 3DES suite show a 6.7Mbit/s with AES suit 16.8Mbit/s > > The LAN with no IPSec, just routing show a 86Mbit/s, the two OBSD boxe > wired together show up to 94Mbit/s ... > During tests, top shows from 70% to 80% of system CPU usage and here are > the vmstat output: I showed similar performance numbers. I got a suggestion off-list to try a current release because this could be related to the hlt hlt bug. I installed a snapshot from 31 July but it didn't improve things. I changed my quick mode transforms from AES SHA to BLF MD5 and improved IPSec performance to about 35Mbps. I also tried the OpenVPN 2.0 package and got around 45Mbps doing AES SHA. Something that didn't make sense to me was disabling kern.usercrypto had no impact on OpenVPN performance. I'd appreciate any suggestions about mistakes I might have made or things to try. Thanks! Mike [1]: http://marc.theaimsgroup.com/?l=openbsd-misc&m=112275803416870&w=2