Hi,
On 25/04/2024 12:07, d tbsky wrote:
Hi:
I think you should look for CONFIG_CRYPTO_CHACHA20POLY1305 in the kernel
config.
after trying and testing, I found besides
"CONFIG_CRYPTO_CHACHA20POLY1305", I also need
"CONFIG_CRYPTO_LIB_POLY1305" and "CONFIG_CRYPTO_LIB_CHACHA". ovpn-dco
will auto-load the three modules when doing CHACHA20POLY1305. at RHEL9
the later two are compiled into kernel directly, so only module
CHACHA20POLY1305 module will be auto-loaded. maybe ovpn-dco should
make dependency with these modules directly like wireguard.
Thanks for testing!
I'd expect CRYPTO_CHACHA20POLY1305 to pull what's needed. Strange that
it didn't happen.
On my workstation I did not have such problem.
Anyway, I will double check if there is something missing on our side.
the device can do "100Mbs/60Mbps" upload/download speed with chacha20
dco. it seems dco is good at encryption, but not so good at
decryption(wireguard can do 300Mbps). as a client normally I want
fast decryption. is there parameter I can tune for faster decryption?
Unfortunately there is no magic button to improve decryption performance
alone.
Problem being that there can be many factors affecting the results
here..including the specific platform you are testing this on.
This said, dco is going through a large code revamp, therefore we'll get
a chance to better investigate performance issue once that revamp is done.
Thanks a lot for your feedback so far!
--
Antonio Quartulli
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
