On Tue, May 17, 2011 at 3:45 PM, Stuart Henderson <s...@spacehopper.org> wrote: > On 2011-05-17, patrick.oesch...@bluewin.ch <patrick.oesch...@bluewin.ch> > wrote: >> i am looking for a IPSEC accelerator board for a company firewall to >> terminate multiple IPSEC tunnels (branches) >> >> expected IPSEC traffic: ~500mbit/s (100 tunnels) >> any recommendations for a *pci express 4x* board handling this amount >> of traffic? >> thank you >> /pat >> >> > > there hasn't been support for any newer bus-based accelerators > added recently (overheads for these are typically rather high). > > currently if you want fast AES, you should be looking at the > newer intel cpus with AESNI (and OpenBSD 4.9 or newer), but this > doesn't fit your pcie 4x requirements. > >
unfortunately, aesni won't help you much here as you still have to do not accelerated hmac which will cap the maximum throughput.