4200 wireguard and hardware acceleration

ddbnj

I was considering upgrading from my PfSenseCE device to a 4200 if I can get faster wireguard performance.

I can't find out if Ipsec-MB (IIMB) is available on the 4200.

I'm not sure if the AVX, AVX2, or VAES are utilized by wireguard.

Thanks for any insight.

-Devan

SteveITS

@ddbnj

IPsec-MB is, QAT isn't:

Genuine Intel(R) Atom C1110 processor
Current: 1810 MHz, Max: 2112 MHz
4 CPUs : 1 package(s) x 4 core(s)
AES-NI CPU Crypto: Yes (active)
IPsec-MB Crypto: Yes (active)
QAT Crypto: No

I'm not familiar with Wireguard details.

marcosm

Yes, the Netgate 4200 supports IIMB and can help with WireGuard, more details here:
https://docs.netgate.com/pfsense/en/latest/hardware/cryptographic-accelerators.html