Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Intel Xeon D-2796NT and QAT

    Scheduled Pinned Locked Moved Development
    5 Posts 2 Posters 57 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • MarinSNBM Online
      MarinSNB
      last edited by

      Hi all,

      Have been searching all the QAT-related topics on the forums in the last several months and especially this post among them:

      https://forum.netgate.com/topic/183177/intel-xeon-d-1736nt-qat-on-pfsense-plus-23-05-1?_=1761261416961

      and was wondering if I am experiencing the same issue.

      I have a Supermicro machine with a Xeon D-2796NT processor and pfSense Plus (25.11 Beta) loaded in it and have been wondering if there would be a way to have QAT fully activated in it. Have run some commands to see if the QAT drivers have been loaded and they show that they are (or at least I hope). However, the main pfSense web UI still displays QAT Crypto: No.

      Just like in the post I linked, the vmstat command also does not produce any info, so I am wondering too if this particular CPU/QAT driver is not on the list of FreeBSD approved drivers that has been shared in other posts. If this is the case, how does one find out if this CPU (and or other ones for that matter) may or may not make it in this list in the future? Can users request to have them included via a Redmine request? If so what information is needed for such submission? I am a complete newb when it comes to QAT....

      Below are few screenshots from a few commands used when investigating this. Let me know if you need other info.

      Appreciate your input and assistance !

      Screenshot 2025-10-23 at 6.26.34 PM.png ![Screenshot 2025-10-23 at 6.26.10 PM.png]

      Screenshot 2025-10-23 at 12.14.52 PM.png Screenshot 2025-10-23 at 6.26.10 PM.png

      Screenshot 2025-10-23 at 6.38.52 PM.png

      Screenshot 2025-10-23 at 6.45.31 PM.png ![Screenshot 2025-10-23 at 6.44.11 PM.png]Screenshot 2025-10-23 at 6.49.05 PM.png (/assets/uploads/files/1761263216381-screenshot-2025-10-23-at-6.42.13â-pm.png)

      Screenshot 2025-10-23 at 6.50.34 PM.png

      Screenshot 2025-10-23 at 6.57.38 PM.png Screenshot 2025-10-23 at 6.58.30 PM.png

      Screenshot 2025-10-23 at 6.59.53 PM.png

      ![Screenshot 2025-10-23 at 7.00.14 PM.png]
      (/assets/uploads/files/1761264040658-screenshot-2025-10-23-at-7.00.14â-pm.png)

      Screenshot 2025-10-23 at 7.03.25 PM.png

      Screenshot 2025-10-23 at 7.05.49 PM.png

      Screenshot 2025-10-23 at 7.09.22 PM.png

      1 Reply Last reply Reply Quote 0
      • stephenw10S Offline
        stephenw10 Netgate Administrator
        last edited by

        Mmm, the driver itself is loaded and has attached to the hardware. It should have registered the supported ciphers with the cryptodev framework.

        The device lists in pfSense just need to be updated to include it. Similarly to this: https://redmine.pfsense.org/issues/14844

        Let me see....

        1 Reply Last reply Reply Quote 0
        • stephenw10S Offline
          stephenw10 Netgate Administrator
          last edited by

          Ok try the attached patch if you can:

          180.diff

          I don't actually have a device with that QAT hardware so I can't test it unfortunately. But it's pretty simple.

          MarinSNBM 1 Reply Last reply Reply Quote 1
          • MarinSNBM Online
            MarinSNB @stephenw10
            last edited by

            @stephenw10

            It works! Thank you so much!

            Screenshot 2025-10-24 at 2.53.13 PM.png

            So will this patch make it into the next Plus release then?

            Thanks again!

            1 Reply Last reply Reply Quote 0
            • stephenw10S Offline
              stephenw10 Netgate Administrator
              last edited by

              It may be too late for 25.11 but it's very simple so we'll see.....

              1 Reply Last reply Reply Quote 1
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.