Using the onboard crypto chip



  • Is there anyway to activate the onboard crypto chip on the SG-1000. I am using it to vpn to my main office and I would like to offload the crypto to the chip, so the cpu has more time for other stuff.

    am335x built-in CPU Crypto (inactive)

    Also, do you know what crypto gets the best performance through this chip?

    Thanks,
    George


  • Galactic Empire Netgate Administrator

    The onboard crypto accelerator will be used with pfSense 2.5.

    Using OpenVPN AES-128-CBC can achieve up to 20Mbps.
    Using IPsec AES128-GCM IKEv2 can achieve up to 22Mbps.



  • @ivor:

    The onboard crypto accelerator will be used with pfSense 2.5.

    Using OpenVPN AES-128-CBC can achieve up to 20Mbps.
    Using IPsec AES128-GCM IKEv2 can achieve up to 22Mbps.

    Perhaps those 3 sentences (or at least an indication) can be put on the product page? Seems a lot of people are interested in rough VPN throughput of the SG devices. Even suggestions like “Use SG-3100 for WAN connections above 200Mbps” would give purchasers a guide 🙂


  • Galactic Empire Netgate Administrator

    I agree, this was suggested many times. I was told that this will be fixed in future website update.


 

© Copyright 2002 - 2018 Rubicon Communications, LLC | Privacy Policy