Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense mini pc and QAT

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      It may show as qat0 in which case the driver is attaching but the gui doesn't recognise it. Or it could be shows as a 'none' device where the driver hasn't attached but it should still show as a crypto device.

      MarinSNBM 1 Reply Last reply Reply Quote 0
      • MarinSNBM
        MarinSNB @stephenw10
        last edited by

        @stephenw10

        This is what I have:

        hostb0@pci0:0:0:0: class=0x060000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x4601 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        class = bridge
        subclass = HOST-PCI
        vgapci0@pci0:0:2:0: class=0x030000 rev=0x0c hdr=0x00 vendor=0x8086 device=0x46a8 subvendor=0x8086 subdevice=0x2212
        vendor = 'Intel Corporation'
        device = 'Alder Lake-UP3 GT2 [Iris Xe Graphics]'
        class = display
        subclass = VGA
        pcib1@pci0:0:6:0: class=0x060400 rev=0x04 hdr=0x01 vendor=0x8086 device=0x464d subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = '12th Gen Core Processor PCI Express x4 Controller'
        class = bridge
        subclass = PCI-PCI
        none0@pci0:0:8:0: class=0x088000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x464f subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = '12th Gen Core Processor Gaussian & Neural Accelerator'
        class = base peripheral
        xhci0@pci0:0:20:0: class=0x0c0330 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51ed subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCH USB 3.2 xHCI Host Controller'
        class = serial bus
        subclass = USB
        none1@pci0:0:20:2: class=0x050000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51ef subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCH Shared SRAM'
        class = memory
        subclass = RAM
        none2@pci0:0:22:0: class=0x078000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51e0 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCH HECI Controller'
        class = simple comms
        ahci0@pci0:0:23:0: class=0x010601 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51d3 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake-P SATA AHCI Controller'
        class = mass storage
        subclass = SATA
        pcib2@pci0:0:28:0: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51ba subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        class = bridge
        subclass = PCI-PCI
        pcib3@pci0:0:28:3: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51bb subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake-P PCH PCIe Root Port'
        class = bridge
        subclass = PCI-PCI
        pcib4@pci0:0:28:4: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51bc subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        class = bridge
        subclass = PCI-PCI
        pcib5@pci0:0:29:0: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51b0 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCI Express Root Port'
        class = bridge
        subclass = PCI-PCI
        pcib6@pci0:0:29:1: class=0x060400 rev=0x01 hdr=0x01 vendor=0x8086 device=0x51b1 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCI Express x1 Root Port'
        class = bridge
        subclass = PCI-PCI
        isab0@pci0:0:31:0: class=0x060100 rev=0x01 hdr=0x00 vendor=0x8086 device=0x5182 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCH eSPI Controller'
        class = bridge
        subclass = PCI-ISA
        hdac0@pci0:0:31:3: class=0x040100 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51c8 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCH-P High Definition Audio Controller'
        class = multimedia
        subclass = audio
        ichsmb0@pci0:0:31:4: class=0x0c0500 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51a3 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake PCH-P SMBus Host Controller'
        class = serial bus
        subclass = SMBus
        none3@pci0:0:31:5: class=0x0c8000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51a4 subvendor=0x8086 subdevice=0x7270
        vendor = 'Intel Corporation'
        device = 'Alder Lake-P PCH SPI Controller'
        class = serial bus
        nvme0@pci0:1:0:0: class=0x010802 rev=0x01 hdr=0x00 vendor=0x1e4b device=0x1202 subvendor=0x1e4b subdevice=0x1202
        vendor = 'MAXIO Technology (Hangzhou) Ltd.'
        device = 'NVMe SSD Controller MAP1202'
        class = mass storage
        subclass = NVM
        igc0@pci0:2:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
        vendor = 'Intel Corporation'
        device = 'Ethernet Controller I226-V'
        class = network
        subclass = ethernet
        igc1@pci0:3:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
        vendor = 'Intel Corporation'
        device = 'Ethernet Controller I226-V'
        class = network
        subclass = ethernet
        ix0@pci0:4:0:0: class=0x020000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x10fb subvendor=0xffff subdevice=0xffff
        vendor = 'Intel Corporation'
        device = '82599ES 10-Gigabit SFI/SFP+ Network Connection'
        class = network
        subclass = ethernet
        ix1@pci0:4:0:1: class=0x020000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x10fb subvendor=0xffff subdevice=0xffff
        vendor = 'Intel Corporation'
        device = '82599ES 10-Gigabit SFI/SFP+ Network Connection'
        class = network
        subclass = ethernet
        igc2@pci0:5:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
        vendor = 'Intel Corporation'
        device = 'Ethernet Controller I226-V'
        class = network
        subclass = ethernet
        igc3@pci0:6:0:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x125c subvendor=0x8086 subdevice=0x0000
        vendor = 'Intel Corporation'
        device = 'Ethernet Controller I226-V'
        class = network
        subclass = ethernet

        Netgate 6100 Max pfSense+
        —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
        —> UCK2+
        —> 3x U6E APs

        MarinSNBM 1 Reply Last reply Reply Quote 0
        • MarinSNBM
          MarinSNB @MarinSNB
          last edited by

          The CPU is an I5-1235U which shows to support QAT per Intel’s website:

          https://www.intel.com/content/www/us/en/products/sku/226261/intel-core-i51235u-processor-12m-cache-up-to-4-40-ghz/specifications.html

          Netgate 6100 Max pfSense+
          —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
          —> UCK2+
          —> 3x U6E APs

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm it's curiously named Intel® QuickAssist Software Acceleration as opposed to Integrated Intel® QuickAssist Technology.

            Is it enabled in the BIOS?

            MarinSNBM 1 Reply Last reply Reply Quote 0
            • MarinSNBM
              MarinSNB @stephenw10
              last edited by

              @stephenw10

              I don’t know how to do so in BIOS. I looked in there to see but couldn’t find any related items under the CPU configuration.

              Netgate 6100 Max pfSense+
              —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
              —> UCK2+
              —> 3x U6E APs

              1 Reply Last reply Reply Quote 0
              • M
                mvikman
                last edited by

                Don't know if this is up to date, but it looks like QAT is only on Xeon, Atom C3000 and QAT accelerator cards...?
                https://www.intel.com/content/www/us/en/support/articles/000094285/technologies/intel-quickassist-technology-intel-qat.html

                pfSense Plus 24.11-RELEASE (amd64)
                Dell Optiplex 7040 SFF
                Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                HPE 561T (X540-AT2), 2-port 10Gb RJ45
                HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                K 1 Reply Last reply Reply Quote 0
                • K
                  Konstanti @mvikman
                  last edited by Konstanti

                  @mvikman
                  Hi
                  At the moment (Freebsd 14.1 - 15.0)

                  1. The qat driver supports cryptography and compression acceleration of the Intel (R) QuickAssist Technology (QAT) devices..
                    The qat driver is intended for platforms that contain:
                    • Intel (R) C62x Chipset
                    • Intel (R) Atom C3000 processor product family
                    • Intel (R) QuickAssist Adapter 8960/Intel (R) QuickAssist Adapter 8970 (formerly known as "Lewis Hill")
                    • Intel (R) Communications Chipset 8925 to 8955 Series
                    • Intel (R) Atom P5300 processor product family
                    • Intel (R) QAT 4xxx Series

                  https://man.freebsd.org/cgi/man.cgi?query=qat&apropos=0&sektion=0&manpath=FreeBSD+14.1-RELEASE&arch=default&format=html

                  1. The QAT driver is not included in the pfSense 2.7.2 kernel
                    The only way is to build your own kernel and port this driver manually

                  9606de26-100b-475b-9d50-1a7e3e28bc7c-telegram-cloud-photo-size-4-5920001969995500937-y.jpg

                  2.7.2-RELEASE][admin@ru.xxxx.org]/root: kldstat -v | grep qat
                  5 1 0xffffffff835da000 123890 qat_c3xxx_fw.ko (/boot/kernel/qat_c3xxx_fw.ko)
                  4 qat_c3xxx_fw_fw
                  8 1 0xffffffff83cda000 8548 qat.ko (/boot/kernel/qat.ko)
                  19 nexus/qat
                  9 9 0xffffffff83ce3000 83d80 qat_api.ko (/boot/kernel/qat_api.ko)
                  11 qat_api
                  10 10 0xffffffff83d67000 53298 qat_common.ko (/boot/kernel/qat_common.ko)
                  10 qat_common
                  11 7 0xffffffff83dbb000 29588 qat_hw.ko (/boot/kernel/qat_hw.ko)
                  18 pci/qat_c4xxx
                  13 pci/qat_200xx
                  17 pci/qat_dh895xcc
                  16 pci/qat_c3xxx
                  12 pci/qat_c62x
                  15 pci/qat_4xxxvf
                  14 pci/qat_4xxx

                  MarinSNBM 1 Reply Last reply Reply Quote 0
                  • MarinSNBM
                    MarinSNB @Konstanti
                    last edited by

                    @Konstanti

                    Thanks for sharing! Any thoughts on how to do this and where to look to get started with this?

                    Thanks again!

                    Netgate 6100 Max pfSense+
                    —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
                    —> UCK2+
                    —> 3x U6E APs

                    1 Reply Last reply Reply Quote 0
                    • M
                      mvikman
                      last edited by

                      FYI, found this regarding QuickAssist Software Acceleration:
                      "To determine which processor SKU has dedicated Intel QAT hardware available, refer to ARK. For example, the Intel Xeon Gold 6430 Processor does not have dedicated Intel QAT hardware (and there is no available upgrades via Intel On Demand either). It will still run the Intel QAT driver but using the CPU cores, that's why the line Intel QuickAssist Software Acceleration says Yes."

                      https://www.intel.com/content/www/us/en/support/articles/000095464/technologies/intel-quickassist-technology-intel-qat.html

                      pfSense Plus 24.11-RELEASE (amd64)
                      Dell Optiplex 7040 SFF
                      Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                      HPE 561T (X540-AT2), 2-port 10Gb RJ45
                      HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                      1 Reply Last reply Reply Quote 1
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Mmm, so probably no hardware to attach to.

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.