OpenVPN and AES-NI?
-
In reading through the pfSense I noticed that references to AES-NI are related to IPSec. Does OpenVPN use it? If not, will future versions of pfSense, that require AES-NI, not work, even if IPSec is not used?
-
OpenVPN will automatically use it if it's available.
Or to be more correct, OpenSSL.
OpenSSL has built-in code to talk to acceleration device. -
It looks like I'll have to get some new hardware, when it becomes mandatory. My current system has an AMD CPU, without AES-NI.
-
The secret was known - see official source like the Netgate's blog - for long time 2.5.0 would be needing AES hardware.
Or, that has been cancelled - see here.Bets are open for 3.0 ....
-
@Gertjan said in OpenVPN and AES-NI?:
Or, that has been cancelled
Judging from those comments, I'd say postponed.
