How do I use AES-NI and hardware acceleration
-
I am using a 7600k CPU. I tried without hardware acceleration and I get 500-620 mb/s down and 200-350 mb/s up. I tried with hardware acceleration and I get the same speed. I tried all combinations of turning it on in openvpn, turning it on in advance->miscellaneous and rebooting the system. The speed doesn't seem to change either way. I am using Private Internet Access.
What exactly needs to be turned on? -
gb/s –- Wow! ;) Multiple OC-768 connections... Freaking sweet ;) like 15 of them... To see 620 gigabits per second...
-
gb/s –- Wow! ;) Multiple OC-768 connections... Freaking sweet ;) like 15 of them... To see 620 gigabits per second...
Fixed. All the same, how do I set it up so it uses hardware acceleration on Pfsense 2.4.2
-
I would ask what cipher your using?
https://doc.pfsense.org/index.php/Are_cryptographic_accelerators_supported#Practical_Use
But you should read this thread - its related to your PIA connection even.
https://forum.pfsense.org/index.php?topic=128698.0Seems the doc might need some updating?
-
how do I set it up so it uses hardware acceleration on Pfsense 2.4.2
You leave it alone. It wouldn't be going that fast if you'd actually managed to turn off hardware acceleration.
-
After hours of testing in different setups, I have figured out how it works but it is still weird that it does work this way.
1) Turning hardware acceleration On and Off in OpenVPN setup does nothing.
2) It runs the fastest when both AES-NI and BSD Crypto is on in advance->miscellaneous. If any one of those are off, it moves roughly as fast as not having any acceleration on at all. My guess is that it can't turn on hardware acceleration unless both are on. This is 2.4.2 by the way. On a 7600K.
I get 350- 500 mb/s down with hardware acceleration off. I get 550 mb/s - 650 mb/s down with hard acceleration on.
I get 250-350 mb/s up with hardware acceleration off. I get 350-450 mb/s up with hardware acceleration on.
