Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense 23.09 Intel QAT 4xxx passthrough question

    Scheduled Pinned Locked Moved Virtualization
    13 Posts 4 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • NollipfSenseN
      NollipfSense @Lurick
      last edited by

      @Lurick Are you running a PCI QAT device? The method you used describes a PCI device...not a CPU with the ability to perform accelerating encryption. In my setup, I use Qat 8950 that's installed in a PCI slot.

      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

      L Sergei_ShablovskyS 2 Replies Last reply Reply Quote 1
      • L
        Lurick LAYER 8 @NollipfSense
        last edited by

        @NollipfSense Ok, I feel like an idiot, haha
        I'm trying to use the CPU accelerators and assumed I just needed to pass them through somehow.
        I guess what threw me off is that QAT says No even though the Intel 4000 series Xeon Scalable does have the support so I'm wondering why pfsense says No

        NollipfSenseN 1 Reply Last reply Reply Quote 0
        • NollipfSenseN
          NollipfSense @Lurick
          last edited by

          @Lurick Since you're using the CPU, no need to pass through anything...just select System > Advance . Misc and set crypto...and no, you're not an idiot.

          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

          1 Reply Last reply Reply Quote 1
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            The QAT device still appears as a separate PCIe device that would need to be passed to the guest.

            NollipfSenseN 1 Reply Last reply Reply Quote 0
            • NollipfSenseN
              NollipfSense @stephenw10
              last edited by NollipfSense

              @stephenw10 said in pfSense 23.09 Intel QAT 4xxx passthrough question:

              The QAT device still appears as a separate PCIe device that would need to be passed to the guest.

              Even though in his or her case they're using the built-in QAT in the CPU? The OP seems to have done the required configuration for passing through a PCI device with no result.

              pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
              pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Yes, it's still a PCIe device so it has to be passed through.

                The pfSense GUI doesn't show it because it hasn't yet been updated to support 4xxx devices: https://redmine.pfsense.org/issues/15233

                The kernel will still use it for crypto operations if it's loaded though.

                NollipfSenseN 1 Reply Last reply Reply Quote 1
                • NollipfSenseN
                  NollipfSense @stephenw10
                  last edited by

                  @stephenw10 Good to know...thanks.

                  pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                  pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                  1 Reply Last reply Reply Quote 1
                  • Sergei_ShablovskyS
                    Sergei_Shablovsky @NollipfSense
                    last edited by

                    @NollipfSense said in pfSense 23.09 Intel QAT 4xxx passthrough question:

                    @Lurick Are you running a PCI QAT device? The method you used describes a PCI device...not a CPU with the ability to perform accelerating encryption. In my setup, I use Qat 8950 that's installed in a PCI slot.

                    @NollipfSense Please, is Qat 8970 much (30-40%+) faster than Qat 8950 ?

                    Do You have some issues with stability? Overheating?

                    —
                    CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                    Help Ukraine to resist, save civilians people’s lives !
                    (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                    NollipfSenseN 1 Reply Last reply Reply Quote 0
                    • NollipfSenseN
                      NollipfSense @Sergei_Shablovsky
                      last edited by

                      @Sergei_Shablovsky said in pfSense 23.09 Intel QAT 4xxx passthrough question:

                      Please, is Qat 8970 much (30-40%+) faster than Qat 8950 ?

                      Do You have some issues with stability? Overheating?

                      I have never compared however, it should...I got mine from a Chinese seller on eBay as price was very reasonable...QAT 8970 is just too expensive. Mine has never showed any instabilities since installed. It does output heat...never overheated though.

                      I had hope that QAT was enabled in pfSense for any encrypted browsing but it's not the case...bummer...now that an expensive price on the table, it would be nice of pfSense to enable QAT for all encryption need...waiting.

                      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                      Sergei_ShablovskyS 1 Reply Last reply Reply Quote 1
                      • Sergei_ShablovskyS
                        Sergei_Shablovsky @NollipfSense
                        last edited by Sergei_Shablovsky

                        @NollipfSense said in pfSense 23.09 Intel QAT 4xxx passthrough question:

                        @Sergei_Shablovsky said in pfSense 23.09 Intel QAT 4xxx passthrough question:

                        Please, is Qat 8970 much (30-40%+) faster than Qat 8950 ?

                        Do You have some issues with stability? Overheating?

                        I have never compared however, it should...I got mine from a Chinese seller on eBay as price was very reasonable...

                        Right now on USA eBay (where PP able to make chargeback, opposite to many DOA from Chinas sellers) QAT8950 cost USD$50-80

                        QAT 8970 is just too expensive.
                        Right now on USA eBay price are USD$150-220

                        Because that difference in price I’m asking about speed..:)

                        Mine has never showed any instabilities since installed. It does output heat...never overheated though.

                        Is it installed in rack server or just desktop tower?

                        I had hope that QAT was enabled in pfSense for any encrypted browsing but it's not the case...bummer...now that an expensive price on the table, it would be nice of pfSense to enable QAT for all encryption need...waiting.

                        But QAT are presented many years ago… I also hate LOOONG pfSense update cycles. ;)

                        Good luck with QAT using!

                        —
                        CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                        Help Ukraine to resist, save civilians people’s lives !
                        (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                        NollipfSenseN 1 Reply Last reply Reply Quote 0
                        • NollipfSenseN
                          NollipfSense @Sergei_Shablovsky
                          last edited by NollipfSense

                          @Sergei_Shablovsky said in pfSense 23.09 Intel QAT 4xxx passthrough question:

                          Right now on USA eBay (where PP able to make chargeback, opposite to many DOA from Chinas sellers) QAT8950 cost USD$50-80

                          I bought mine over a year ago from a Chinese seller for $37, in fact I bought two because at that price each, why not, while at the time, the QAT 8970 by US sellers priced at $800+ So, priced had fallen...that's good. Both mine are installed in work stations, a Lenovo and a Dell...see sig.

                          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                          1 Reply Last reply Reply Quote 1
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.