PFSense OpenVPN with Hifn 8204 chip (Exar DX1845 Card)
I've been searching the internet for what feels like hours and hours.
I want to get my Exar DX1845 (which uses a Hifn 8204 chip) working on PFSense to offload the VPNs AES-128-CBC from the CPU to the card.
According to datasheets, this card can do upwards of 2GB/s on AES-128-CBC, which is perfect for me, however pfsense just doesnt see it.
What I have tried to do:
I've enabled the BSD Module in advanced, and i can see that the module is loaded, but running 'openssl engine -c -t' does not show AES as a viable hardware option.
I also noticed in dmesg, the card shows that no driver has been loaded for it, I thought i read in multiple places that PFSense supports hifn chips?
none0@pci0:4:0:0: class=0x108000 card=0x003613a3 chip=0x003713a3 rev=0x00 hdr=0x00 vendor = 'Hifn Inc.' device = '8204 Acceleration Processor' class = encrypt/decrypt bar  = type Memory, range 64, base 0xf7700000, size 4096, enabled cap 01 = powerspec 3 supports D0 D1 D3 current D0 cap 05 = MSI supports 1 message, 64 bit cap 10 = PCI-Express 2 endpoint max data 256(512) NS link x4(x4) speed 2.5(2.5) ASPM disabled(L0s/L1) ecap 0001 = AER 1 0 fatal 0 non-fatal 1 corrected ecap 0002 = VC 1 max VC0
dmesg output that's relevant:
pci4: <encrypt/decrypt> at device 0.0 (no driver attached) pcib5: <PCI-PCI bridge> irq 18 at device 6.0 on pci2 pci5: <PCI bus> on pcib5 pci5: <encrypt/decrypt> at device 0.0 (no driver attached) pcib6: <PCI-PCI bridge> irq 16 at device 8.0 on pci2 pci6: <PCI bus> on pcib6 pci6: <encrypt/decrypt> at device 0.0 (no driver attached) pcib7: <PCI-PCI bridge> irq 17 at device 9.0 on pci2 pci7: <PCI bus> on pcib7 pci7: <encrypt/decrypt> at device 0.0 (no driver attached)
Any help would be great.
dotdash last edited by
Per the man page, that chipset is not supported in the driver-
The hifn driver supports various cards containing the Hifn 7751, 7951,
7811, 7955, and 7956 chipsets.
Thanks for your speedy reply.
This is a shame, i must have missed that part during the googling sessions.
I guess I'll look into getting a higher clocked speed AES-NI Intel Chip instead :)