Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense mini pc and QAT

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      It may not be supported by the driver yet. Check the PCI IDs shown by pciconf -lv.

      Then check the list: https://github.com/pfsense/FreeBSD-src/blob/RELENG_2_7_0/sys/dev/qat/include/common/adf_accel_devices.h#L12

      Steve

      MarinSNBM 1 Reply Last reply Reply Quote 0
      • MarinSNBM
        MarinSNB @stephenw10
        last edited by

        @stephenw10

        I will check it out! Thanks so much, Steve!

        Netgate 6100 Max pfSense+
        —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
        —> UCK2+
        —> 3x U6E APs

        1 Reply Last reply Reply Quote 0
        • MarinSNBM
          MarinSNB
          last edited by

          @stephenw10

          Was able to plug this command via shell. It generated a lot of info including each interface and PCI but I am not sure what I am supposed to look for. I can share the output if needed.

          Thanks much!

          Marin

          Netgate 6100 Max pfSense+
          —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
          —> UCK2+
          —> 3x U6E APs

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            It may show as qat0 in which case the driver is attaching but the gui doesn't recognise it. Or it could be shows as a 'none' device where the driver hasn't attached but it should still show as a crypto device.

            MarinSNBM 1 Reply Last reply Reply Quote 0
            • MarinSNBM
              MarinSNB @stephenw10
              last edited by

              @stephenw10

              This is what I have:

              hostb0@pci0:0:0:0: class=0x060000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x4601 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              class = bridge
              subclass = HOST-PCI
              vgapci0@pci0:0:2:0: class=0x030000 rev=0x0c hdr=0x00 vendor=0x8086 device=0x46a8 subvendor=0x8086 subdevice=0x2212
              vendor = 'Intel Corporation'
              device = 'Alder Lake-UP3 GT2 [Iris Xe Graphics]'
              class = display
              subclass = VGA
              pcib1@pci0:0:6:0: class=0x060400 rev=0x04 hdr=0x01 vendor=0x8086 device=0x464d subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = '12th Gen Core Processor PCI Express x4 Controller'
              class = bridge
              subclass = PCI-PCI
              none0@pci0:0:8:0: class=0x088000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x464f subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = '12th Gen Core Processor Gaussian & Neural Accelerator'
              class = base peripheral
              xhci0@pci0:0:20:0: class=0x0c0330 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51ed subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCH USB 3.2 xHCI Host Controller'
              class = serial bus
              subclass = USB
              none1@pci0:0:20:2: class=0x050000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51ef subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCH Shared SRAM'
              class = memory
              subclass = RAM
              none2@pci0:0:22:0: class=0x078000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51e0 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCH HECI Controller'
              class = simple comms
              ahci0@pci0:0:23:0: class=0x010601 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51d3 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake-P SATA AHCI Controller'
              class = mass storage
              subclass = SATA
              pcib2@pci0:0:28:0: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51ba subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              class = bridge
              subclass = PCI-PCI
              pcib3@pci0:0:28:3: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51bb subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake-P PCH PCIe Root Port'
              class = bridge
              subclass = PCI-PCI
              pcib4@pci0:0:28:4: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51bc subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              class = bridge
              subclass = PCI-PCI
              pcib5@pci0:0:29:0: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51b0 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCI Express Root Port'
              class = bridge
              subclass = PCI-PCI
              pcib6@pci0:0:29:1: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51b1 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCI Express x1 Root Port'
              class = bridge
              subclass = PCI-PCI
              isab0@pci0:0:31:0: class=0x060100 rev=0x01 hdr=0x00 vendor=0x8086 device=0x5182 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCH eSPI Controller'
              class = bridge
              subclass = PCI-ISA
              hdac0@pci0:0:31:3: class=0x040100 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51c8 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCH-P High Definition Audio Controller'
              class = multimedia
              subclass = audio
              ichsmb0@pci0:0:31:4: class=0x0c0500 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51a3 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake PCH-P SMBus Host Controller'
              class = serial bus
              subclass = SMBus
              none3@pci0:0:31:5: class=0x0c8000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51a4 subvendor=0x8086 subdevice=0x7270
              vendor = 'Intel Corporation'
              device = 'Alder Lake-P PCH SPI Controller'
              class = serial bus
              nvme0@pci0:1:0:0: class=0x010802 rev=0x01 hdr=0x00 vendor=0x1e4b device=0x1202 subvendor=0x1e4b subdevice=0x1202
              vendor = 'MAXIO Technology (Hangzhou) Ltd.'
              device = 'NVMe SSD Controller MAP1202'
              class = mass storage
              subclass = NVM
              igc0@pci0:2:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
              vendor = 'Intel Corporation'
              device = 'Ethernet Controller I226-V'
              class = network
              subclass = ethernet
              igc1@pci0:3:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
              vendor = 'Intel Corporation'
              device = 'Ethernet Controller I226-V'
              class = network
              subclass = ethernet
              ix0@pci0:4:0:0: class=0x020000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x10fb subvendor=0xffff subdevice=0xffff
              vendor = 'Intel Corporation'
              device = '82599ES 10-Gigabit SFI/SFP+ Network Connection'
              class = network
              subclass = ethernet
              ix1@pci0:4:0:1: class=0x020000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x10fb subvendor=0xffff subdevice=0xffff
              vendor = 'Intel Corporation'
              device = '82599ES 10-Gigabit SFI/SFP+ Network Connection'
              class = network
              subclass = ethernet
              igc2@pci0:5:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
              vendor = 'Intel Corporation'
              device = 'Ethernet Controller I226-V'
              class = network
              subclass = ethernet
              igc3@pci0:6:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
              vendor = 'Intel Corporation'
              device = 'Ethernet Controller I226-V'
              class = network
              subclass = ethernet

              Netgate 6100 Max pfSense+
              —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
              —> UCK2+
              —> 3x U6E APs

              MarinSNBM 1 Reply Last reply Reply Quote 0
              • MarinSNBM
                MarinSNB @MarinSNB
                last edited by

                The CPU is an I5-1235U which shows to support QAT per Intel’s website:

                https://www.intel.com/content/www/us/en/products/sku/226261/intel-core-i51235u-processor-12m-cache-up-to-4-40-ghz/specifications.html

                Netgate 6100 Max pfSense+
                —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
                —> UCK2+
                —> 3x U6E APs

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Hmm it's curiously named Intel® QuickAssist Software Acceleration as opposed to Integrated Intel® QuickAssist Technology.

                  Is it enabled in the BIOS?

                  MarinSNBM 1 Reply Last reply Reply Quote 0
                  • MarinSNBM
                    MarinSNB @stephenw10
                    last edited by

                    @stephenw10

                    I don’t know how to do so in BIOS. I looked in there to see but couldn’t find any related items under the CPU configuration.

                    Netgate 6100 Max pfSense+
                    —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
                    —> UCK2+
                    —> 3x U6E APs

                    1 Reply Last reply Reply Quote 0
                    • M
                      mvikman
                      last edited by

                      Don't know if this is up to date, but it looks like QAT is only on Xeon, Atom C3000 and QAT accelerator cards...?
                      https://www.intel.com/content/www/us/en/support/articles/000094285/technologies/intel-quickassist-technology-intel-qat.html

                      pfSense Plus 24.11-RELEASE (amd64)
                      Dell Optiplex 7040 SFF
                      Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                      HPE 561T (X540-AT2), 2-port 10Gb RJ45
                      HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                      K 1 Reply Last reply Reply Quote 0
                      • K
                        Konstanti @mvikman
                        last edited by Konstanti

                        @mvikman
                        Hi
                        At the moment (Freebsd 14.1 - 15.0)

                        1. The qat driver supports cryptography and compression acceleration of the Intel (R) QuickAssist Technology (QAT) devices..
                          The qat driver is intended for platforms that contain:
                          • Intel (R) C62x Chipset
                          • Intel (R) Atom C3000 processor product family
                          • Intel (R) QuickAssist Adapter 8960/Intel (R) QuickAssist Adapter 8970 (formerly known as "Lewis Hill")
                          • Intel (R) Communications Chipset 8925 to 8955 Series
                          • Intel (R) Atom P5300 processor product family
                          • Intel (R) QAT 4xxx Series

                        https://man.freebsd.org/cgi/man.cgi?query=qat&apropos=0&sektion=0&manpath=FreeBSD+14.1-RELEASE&arch=default&format=html

                        1. The QAT driver is not included in the pfSense 2.7.2 kernel
                          The only way is to build your own kernel and port this driver manually

                        9606de26-100b-475b-9d50-1a7e3e28bc7c-telegram-cloud-photo-size-4-5920001969995500937-y.jpg

                        2.7.2-RELEASE][admin@ru.xxxx.org]/root: kldstat -v | grep qat
                        5 1 0xffffffff835da000 123890 qat_c3xxx_fw.ko (/boot/kernel/qat_c3xxx_fw.ko)
                        4 qat_c3xxx_fw_fw
                        8 1 0xffffffff83cda000 8548 qat.ko (/boot/kernel/qat.ko)
                        19 nexus/qat
                        9 9 0xffffffff83ce3000 83d80 qat_api.ko (/boot/kernel/qat_api.ko)
                        11 qat_api
                        10 10 0xffffffff83d67000 53298 qat_common.ko (/boot/kernel/qat_common.ko)
                        10 qat_common
                        11 7 0xffffffff83dbb000 29588 qat_hw.ko (/boot/kernel/qat_hw.ko)
                        18 pci/qat_c4xxx
                        13 pci/qat_200xx
                        17 pci/qat_dh895xcc
                        16 pci/qat_c3xxx
                        12 pci/qat_c62x
                        15 pci/qat_4xxxvf
                        14 pci/qat_4xxx

                        MarinSNBM 1 Reply Last reply Reply Quote 0
                        • MarinSNBM
                          MarinSNB @Konstanti
                          last edited by

                          @Konstanti

                          Thanks for sharing! Any thoughts on how to do this and where to look to get started with this?

                          Thanks again!

                          Netgate 6100 Max pfSense+
                          —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
                          —> UCK2+
                          —> 3x U6E APs

                          1 Reply Last reply Reply Quote 0
                          • M
                            mvikman
                            last edited by

                            FYI, found this regarding QuickAssist Software Acceleration:
                            "To determine which processor SKU has dedicated Intel QAT hardware available, refer to ARK. For example, the Intel Xeon Gold 6430 Processor does not have dedicated Intel QAT hardware (and there is no available upgrades via Intel On Demand either). It will still run the Intel QAT driver but using the CPU cores, that's why the line Intel QuickAssist Software Acceleration says Yes."

                            https://www.intel.com/content/www/us/en/support/articles/000095464/technologies/intel-quickassist-technology-intel-qat.html

                            pfSense Plus 24.11-RELEASE (amd64)
                            Dell Optiplex 7040 SFF
                            Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                            HPE 561T (X540-AT2), 2-port 10Gb RJ45
                            HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                            1 Reply Last reply Reply Quote 1
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Mmm, so probably no hardware to attach to.

                              1 Reply Last reply Reply Quote 1
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.