Quickassist doesn't seem to be working

[jjstecchino]

kernel find the quickassist adapter

dmesg |grep qat
qat0: <Intel dh895xcc QuickAssist> mem 0xf9e00000-0xf9e7ffff,0xfb140000-0xfb17ffff,0xfb100000-0xfb13ffff irq 16 at device 0.0 on pci9
qat0: qat_dev0 started 12 acceleration engines
qat0: FW version: 4.18.0
qat_ocf0: <QAT engine>

pfsense does not:

iperf speed between two pfsense boxes connected by ipsec is 1/2 of what it used to be.

[jjstecchino]

Ok, pciconf -l output has changed between freebsd versions.

freebsd 12 pciconf -l was:

qat0@pci0:0:11:0:	class=0x0b4000 card=0x00008086 chip=0x1f188086 rev=0x02 hdr=0x00

freebsd 14 pciconf -l gives:

qat0@pci0:8:0:0:	class=0x0b4000 rev=0x00 hdr=0x00 vendor=0x8086 device=0x0435 subvendor=0x8086 subdevice=0x0000

The former chip field that was used to detect quick assist is now made up by device and vendor combined

the function get_cpu_crypto_support() in /usr/local/www/includes/functions.inc.php needs to be updated.

This works for me:

/usr/local/www/includes: diff functions.inc.php.old functions.inc.php
369c369
< 		exec("/usr/sbin/pciconf -l | /usr/bin/awk '{ printf \"%s\\n\", $4 }' | /usr/bin/cut -f2 -d=", $pciids);
---
> 		exec("/usr/sbin/pciconf -l | /usr/bin/awk '{ printf \"%s%s\\n\", $6, substr($5,10,4) }' | /usr/bin/cut -f2 -d=", $pciids);

[gabacho4]

@jjstecchino latest dev build has incorporated a fix that addresses this. Give it a spin if you haven’t already.

[jjstecchino]

@gabacho4 Thank You for the heads up!

Tried to update but I now am getting a certificate error:

Enter an option: 13

>>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
34936709120:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
34936709120:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
34936709120:error:1416F086:SSL 

...

 failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg-static: https://pkg01-atx.netgate.com/beta/packages/pfSense_plus-master_amd64-pfSense_plus_devel/packagesite.txz: Authentication error
Unable to update repository pfSense
Error updating repositories!
>>> Upgrading pfSense-upgrade... failed.

I was going to wait and see if I gets fixed with the next snapshots

[gabacho4]

@jjstecchino it’s going around today. Reboot the router and it should work again. I had the very same issue earlier.