<![CDATA[How do I use AES-NI and hardware acceleration]]>I am using a 7600k CPU.  I tried without hardware acceleration and I get 500-620 mb/s down and 200-350 mb/s up.  I tried with hardware acceleration and I get the same speed.  I tried all combinations of turning it on in openvpn, turning it on in advance->miscellaneous and rebooting the system.  The speed doesn't seem to change either way.  I am using Private Internet Access.
What exactly needs to be turned on?

]]>https://forum.netgate.com/topic/125604/how-do-i-use-aes-ni-and-hardware-accelerationRSS for NodeTue, 17 Mar 2026 06:51:13 GMTThu, 11 Jan 2018 06:57:12 GMT60<![CDATA[Reply to How do I use AES-NI and hardware acceleration on Thu, 11 Jan 2018 20:32:03 GMT]]>After hours of testing in different setups, I have figured out how it works but it is still weird that it does work this way.

1)  Turning hardware acceleration On and Off in OpenVPN setup does nothing.

2)  It runs the fastest when both AES-NI and BSD Crypto is on in advance->miscellaneous.  If any one of those are off, it moves roughly as fast as not having any acceleration on at all.  My guess is that it can't turn on hardware acceleration unless both are on.  This is 2.4.2 by the way.  On a 7600K.

I get 350- 500 mb/s down with hardware acceleration off.  I get 550 mb/s - 650 mb/s down with hard acceleration on.
I get 250-350 mb/s up with hardware acceleration off.  I get 350-450 mb/s up with hardware acceleration on.

]]>https://forum.netgate.com/post/745505https://forum.netgate.com/post/745505Thu, 11 Jan 2018 20:32:03 GMT<![CDATA[Reply to How do I use AES-NI and hardware acceleration on Thu, 11 Jan 2018 16:38:21 GMT]]>@Ryu945:

how do I set it up so it uses hardware acceleration on Pfsense 2.4.2

You leave it alone. It wouldn't be going that fast if you'd actually managed to turn off hardware acceleration.

]]>https://forum.netgate.com/post/745439https://forum.netgate.com/post/745439Thu, 11 Jan 2018 16:38:21 GMT<![CDATA[Reply to How do I use AES-NI and hardware acceleration on Thu, 11 Jan 2018 16:02:39 GMT]]>I would ask what cipher your using?

https://doc.pfsense.org/index.php/Are_cryptographic_accelerators_supported#Practical_Use

But you should read this thread - its related to your PIA connection even.
https://forum.pfsense.org/index.php?topic=128698.0

Seems the doc might need some updating?

]]>https://forum.netgate.com/post/745422https://forum.netgate.com/post/745422Thu, 11 Jan 2018 16:02:39 GMT<![CDATA[Reply to How do I use AES-NI and hardware acceleration on Thu, 11 Jan 2018 14:58:31 GMT]]>@johnpoz:

gb/s –- Wow! ;)  Multiple OC-768 connections... Freaking sweet ;)  like 15 of them... To see 620 gigabits per second...

Fixed.  All the same, how do I set it up so it uses hardware acceleration on Pfsense 2.4.2

]]>https://forum.netgate.com/post/745399https://forum.netgate.com/post/745399Thu, 11 Jan 2018 14:58:31 GMT<![CDATA[Reply to How do I use AES-NI and hardware acceleration on Thu, 11 Jan 2018 10:20:04 GMT]]>gb/s –- Wow! ;)  Multiple OC-768 connections... Freaking sweet ;)  like 15 of them... To see 620 gigabits per second...

]]>https://forum.netgate.com/post/745343https://forum.netgate.com/post/745343Thu, 11 Jan 2018 10:20:04 GMT