Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    State of Via Padlock in pfSense 1.2.2/.3 or 2.0

    Hardware
    1
    3
    4.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Anathematic
      last edited by

      Greetings,

      I have been searching through the forums but I am unable to find a clear answer. With the current version of pfSense, 1.2.2, what is the status of Via Padlock support? I found this post here that talks about enabling the kernel module http://forum.pfsense.org/index.php/topic,13791.msg73550.html#msg73550 . All the other posts are circa 2006. So does this mean that the modules aren't loaded by default? From what I can discern from the interwebs there seems to be a huge performance increase using padlock for things like vpn etc.. Reason I am asking is I just picked up the Via VB8001 with the new Nano processor, then tossed in an intel dual ethernet pci express card.

      Anyone have any experience with Padlock?

      Thanks,

      1 Reply Last reply Reply Quote 0
      • A
        Anathematic
        last edited by

        Looking through the hardware support for 7.1 I don't see any reference to it. http://www.freebsd.org/releases/7.1R/hardware.html#CRYPTO-ACCEL
        However there is a man page for it http://www.freebsd.org/cgi/man.cgi?query=padlock&apropos=0&sektion=4&manpath=FreeBSD+7.0-RELEASE&format=html

        So I guess my question is, is it compiled into the kernel that pfSense runs? Does anyone have any experience using it? Stability/reliability?

        1 Reply Last reply Reply Quote 0
        • A
          Anathematic
          last edited by

          So far I have added padlock_load="YES" to /bootl/loader.conf. When I look at dmesg I see padlock0: No ACE support. Googleing this seems to mean that the module isnt loaded. Anyone know anything special about this?

          I am using an extra via epia board right now, hence the c3 processor. I figured this being a more mature product would have better support than the nano board. Plus I can fubar it without taking down the network.
          thanks in advance for any help.

          $ dmesg
          Copyright © 1992-2008 The FreeBSD Project.
          Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
          The Regents of the University of California. All rights reserved.
          FreeBSD is a registered trademark of The FreeBSD Foundation.
          FreeBSD 7.0-RELEASE-p8 #0: Thu Jan  8 22:07:30 EST 2009
              sullrich@freebsd7-releng_1_2_1.pfsense.org:/usr/obj.pfSense/usr/src/sys/pfSense.7
          Timecounter "i8254" frequency 1193182 Hz quality 0
          CPU: VIA C3 Samuel 2 (800.03-MHz 686-class CPU)
            Origin = "CentaurHauls"  Id = 0x673  Stepping = 3
            Features=0x803035 <fpu,de,tsc,msr,mtrr,pge,mmx>real memory  = 528416768 (503 MB)
          avail memory = 502845440 (479 MB)
          wlan: mac acl policy registered
          kbd1 at kbdmux0
          ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
          hptrr: HPT RocketRAID controller driver v1.1 (Jan  8 2009 22:07:11)
          cryptosoft0: <software crypto="">on motherboard
          padlock0: No ACE support.</software></fpu,de,tsc,msr,mtrr,pge,mmx>

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.