Using the onboard crypto chip

[gnazarey]

Is there anyway to activate the onboard crypto chip on the SG-1000. I am using it to vpn to my main office and I would like to offload the crypto to the chip, so the cpu has more time for other stuff.

am335x built-in CPU Crypto (inactive)

Also, do you know what crypto gets the best performance through this chip?

Thanks,
George

[ivor]

The onboard crypto accelerator will be used with pfSense 2.5.

Using OpenVPN AES-128-CBC can achieve up to 20Mbps.
Using IPsec AES128-GCM IKEv2 can achieve up to 22Mbps.

[moikerz]

@ivor:

The onboard crypto accelerator will be used with pfSense 2.5.

Using OpenVPN AES-128-CBC can achieve up to 20Mbps.
Using IPsec AES128-GCM IKEv2 can achieve up to 22Mbps.

Perhaps those 3 sentences (or at least an indication) can be put on the product page? Seems a lot of people are interested in rough VPN throughput of the SG devices. Even suggestions like “Use SG-3100 for WAN connections above 200Mbps” would give purchasers a guide

[ivor]

I agree, this was suggested many times. I was told that this will be fixed in future website update.