Dear misc@, I just received my new VIA EN15000 Mini-ITX Board featuring a VIA C7 CPU @1500MHz. I bought this to utilize the aes crypto support in the CPU for IPSEC, but I seems to be broken (at least for me).
Since I have no glue at all how IPSEC goes about "looking" for crypto accelerator hardware and making use of it, I'm kind of stuck. Because everything I have found so far by google and archives was that it should "just work". What I experience is the "normal" behaviour I expect of a general purpose CPU, crypto has 90% of CPU time when pushing traffic, thus I max out at about 23Mb/s. Any help is very much appreciated. Regards, ahb Attached: --------- dmesg ipsec.conf openssl speed aes-128-cbc openssl speed aes-256-cbc openssl speed -evp aes-128-cbc openssl speed -evp aes-256-cbc openssl speed -elapsed -evp aes-128-cbc openssl speed -elapsed -evp aes-256-cbc top snippet when pusing 23Mb/s through ## dmesg OpenBSD 3.9-current (GENERIC) #658: Sun Mar 26 01:19:02 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: VIA Esther processor 1500MHz ("CentaurHauls" 686-class) 1.50 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2 cpu0: RNG AES AES-CTR SHA1 SHA256 RSA real mem = 1006137344 (982556K) avail mem = 911187968 (889832K) using 4278 buffers containing 50409472 bytes (49228K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(76) BIOS, date 06/01/06, BIOS32 rev. 0 @ 0xf9360 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown apm0: flags 70102 dobusy 1 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xf0000/0xc4f4 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfc450/160 (8 entries) pcibios0: bad IRQ table checksum pcibios0: PCI BIOS has 8 Interrupt Routing table entries pcibios0: PCI Exclusive IRQs: 5 10 11 pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT8237 ISA" rev 0x00) pcibios0: PCI bus #2 is the last bus bios0: ROM list: 0xc0000/0xfc00 0xd0000/0x8000! 0xd8000/0x1000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 vendor "VIA", unknown product 0x0314 rev 0x00 pchb1 at pci0 dev 0 function 1 vendor "VIA", unknown product 0x1314 rev 0x00 pchb2 at pci0 dev 0 function 2 vendor "VIA", unknown product 0x2314 rev 0x00 pchb3 at pci0 dev 0 function 3 "VIA PT890 Host" rev 0x00 pchb4 at pci0 dev 0 function 4 vendor "VIA", unknown product 0x4314 rev 0x00 pchb5 at pci0 dev 0 function 7 vendor "VIA", unknown product 0x7314 rev 0x00 ppb0 at pci0 dev 1 function 0 "VIA VT8377 AGP" rev 0x00 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 vendor "VIA", unknown product 0x3344 rev 0x01: aperture at 0xf4000000, size 0x10000000 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) "VIA VT6306 FireWire" rev 0x80 at pci0 dev 13 function 0 not configured vge0 at pci0 dev 14 function 0 "VIA VT612x" rev 0x11: irq 10, address 00:40:63:e6:8f:13 ciphy0 at vge0 phy 1: Cicada CS8201 10/100/1000TX PHY, rev. 2 pciide0 at pci0 dev 15 function 0 "VIA VT6420 SATA" rev 0x80: DMA pciide0: using irq 11 for native-PCI interrupt pciide1 at pci0 dev 15 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133, channel 0 configured to compatibility, channel 1 configured to compatibility wd0 at pciide1 channel 0 drive 0: <ST38420A> wd0: 16-sector PIO, LBA, 8223MB, 16841664 sectors wd1 at pciide1 channel 0 drive 1: <ST38421A> wd1: 16-sector PIO, LBA, 8056MB, 16498944 sectors wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 2 wd1(pciide1:0:1): using PIO mode 4, Ultra-DMA mode 2 atapiscsi0 at pciide1 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: <, ATAPI CDROM.48X, 180J> SCSI0 5/cdrom removable cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2 uhci0 at pci0 dev 16 function 0 "VIA VT83C572 USB" rev 0x81: irq 5 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1 at pci0 dev 16 function 1 "VIA VT83C572 USB" rev 0x81: irq 5 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2 at pci0 dev 16 function 2 "VIA VT83C572 USB" rev 0x81: irq 11 usb2 at uhci2: USB revision 1.0 uhub2 at usb2 uhub2: VIA UHCI root hub, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered ehci0 at pci0 dev 16 function 4 "VIA VT6202 USB" rev 0x86: irq 10 usb3 at ehci0: USB revision 2.0 uhub3 at usb3 uhub3: VIA EHCI root hub, rev 2.00/1.00, addr 1 uhub3: 6 ports with 6 removable, self powered viapm0 at pci0 dev 17 function 0 "VIA VT8237 ISA" rev 0x00 iic0 at viapm0 ppb1 at pci0 dev 20 function 0 "DEC 21154 PCI-PCI" rev 0x01 pci2 at ppb1 bus 2 sf0 at pci2 dev 4 function 0 "Adaptec AIC-6915" rev 0x03: irq 10, address 00:00:d1:d9:79:1f sqphy0 at sf0 phy 1: Seeq 80220 10/100 PHY, rev. 1 sf1 at pci2 dev 5 function 0 "Adaptec AIC-6915" rev 0x03: irq 10, address 00:00:d1:d9:79:20 sqphy1 at sf1 phy 1: Seeq 80220 10/100 PHY, rev. 1 isa0 at mainbus0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: <PC speaker> spkr0 at pcppi0 lm0 at isa0 port 0x290/8: W83697HF npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom0: console biomask ffed netmask ffed ttymask ffef pctr: user-level cycle counter enabled uhidev0 at uhub0 port 1 configuration 1 interface 0 uhidev0: Logitech Logitech USB Keyboard, rev 1.10/15.00, addr 2, iclass 3/1 ukbd0 at uhidev0: 8 modifier keys, 6 key codes wskbd1 at ukbd0 mux 1 wskbd1: connecting to wsdisplay0 uhidev1 at uhub0 port 1 configuration 1 interface 1 uhidev1: Logitech Logitech USB Keyboard, rev 1.10/15.00, addr 2, iclass 3/0 uhidev1: 3 report ids uhid0 at uhidev1 reportid 1: input=2, output=0, feature=0 uhid1 at uhidev1 reportid 2: input=1, output=0, feature=0 ums0 at uhidev1 reportid 3: 0 buttons and Z dir. wsmouse0 at ums0 mux 0 dkcsum: wd0 matches BIOS drive 0x80 dkcsum: wd1 matches BIOS drive 0x81 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 pppoe0: phase establish pppoe0: phase authenticate pppoe0: phase network uhidev0: at uhub0 port 1 (addr 2) disconnected wskbd1: disconnecting from wsdisplay0 wskbd1 detached ukbd0 detached uhidev0 detached uhidev1: at uhub0 port 1 (addr 2) disconnected uhid0 detached uhid1 detached wsmouse0 detached ums0 detached uhidev1 detached uhidev0 at uhub0 port 1 configuration 1 interface 0 uhidev0: Logitech Logitech USB Keyboard, rev 1.10/15.00, addr 2, iclass 3/1 ukbd0 at uhidev0: 8 modifier keys, 6 key codes wskbd1 at ukbd0 mux 1 wskbd1: connecting to wsdisplay0 uhidev1 at uhub0 port 1 configuration 1 interface 1 uhidev1: Logitech Logitech USB Keyboard, rev 1.10/15.00, addr 2, iclass 3/0 uhidev1: 3 report ids uhid0 at uhidev1 reportid 1: input=2, output=0, feature=0 uhid1 at uhidev1 reportid 2: input=1, output=0, feature=0 ums0 at uhidev1 reportid 3: 0 buttons and Z dir. wsmouse0 at ums0 mux 0 ## ipsec.conf #------------------------------- lan.ahb.local --------------------------------# ike passive esp from 10.2.0.254 to 10.2.0.1 peer 10.0.0.1 \ quick auth hmac-sha1 \ enc aes \ psk <pre-shared-key> ike passive esp from 10.2.0.0/24 to 10.2.0.1 peer 10.0.0.1 \ quick auth hmac-sha1 \ enc aes \ psk <pre-shared-key> # ... more hosts here #------------------------------------------------------------------------------# ## openssl speed aes-128-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 17311.15k 18319.00k 18569.35k 18893.09k 18765.02k ## openssl speed aes-256-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256 cbc 13658.21k 14272.24k 14446.41k 14594.65k 14587.05k ## openssl speed -evp aes-128-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 50807.21k 181629.43k 493014.94k 823907.91k 1029947.70k ## openssl speed -evp aes-256-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256-cbc 50317.60k 179579.03k 426484.45k 655755.44k 777427.43k ## openssl speed -elapsed -evp aes-128-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 51444.15k 184162.67k 497243.12k 831119.88k 1033012.22k ## openssl speed -elapsed -evp aes-256-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256-cbc 50691.31k 181875.19k 431269.17k 629784.14k 782053.70k ## top snip load averages: 0.55, 0.30, 0.21 15:10:23 46 processes: 1 running, 43 idle, 1 zombie, 1 on processor CPU states: 0.0% user, 0.0% nice, 80.6% system, 1.6% interrupt, 17.8% idle Memory: Real: 19M/104M act/tot Free: 837M Swap: 0K/512M used/tot PID USERNAME PRI NICE SIZE RES STATE WAIT TIME CPU COMMAND 16 root 14 0 0K 36M run - 3:07 19.53% crypto 3 root 10 0 0K 36M sleep apmev 0:25 0.00% apm0 18544 _isakmpd 2 0 2572K 2612K sleep select 0:10 0.00% isakmpd