AES-NI and OpenVPN?
-
@dobby_ said in AES-NI and OpenVPN?:
please have a look at the Intel QAT, because this is loaded instead of the AES-NI!!!! You can use AES-NI or Intel QAT
but not both!Err, I did.
I literally stated my assumption that QAT was preferred over AES-NI and the graphic showing QAT (active) & AES-NI (inactive) is my own (!!!!...?).
-
@dobby_ I have no idea why mine said Inactive and now says Active. All I did was mess with the vpn stuff just to see what is required.
-
@jimbob-indiana said in AES-NI and OpenVPN?:
@dobby_ I have no idea why mine said Inactive and now says Active. All I did was mess with the vpn stuff just to see what is required.
I was only changing the settings in the filed shown below
in the picture (red arrow), after that the AES-NI was shown
permanent as "active" and this also with no configured VPN! I was choosing both entries from the menue:
AES-NI & CryptoDevSo I think since that, the CryptoDev is taking contact to the
AES-NI and there fore it will be announced as "active".
-
The active/inactive label only indicates whether or not the module is loaded. Not whether it's actually in use.
Technically you could load both modules but since both would attempt to register for the same crypto algorithms the result would be confusing. So the webgui only offers the choice to load one of them.
-
@stephenw10 Hey, an assumption turned out right! My journey into full pfSense nirvana continues.
