pfSense 23.09 Intel QAT 4xxx passthrough question
-
@NollipfSense Ok, I feel like an idiot, haha
I'm trying to use the CPU accelerators and assumed I just needed to pass them through somehow.
I guess what threw me off is that QAT says No even though the Intel 4000 series Xeon Scalable does have the support so I'm wondering why pfsense says No -
@Lurick Since you're using the CPU, no need to pass through anything...just select System > Advance . Misc and set crypto...and no, you're not an idiot.
-
The QAT device still appears as a separate PCIe device that would need to be passed to the guest.
-
@stephenw10 said in pfSense 23.09 Intel QAT 4xxx passthrough question:
The QAT device still appears as a separate PCIe device that would need to be passed to the guest.
Even though in his or her case they're using the built-in QAT in the CPU? The OP seems to have done the required configuration for passing through a PCI device with no result.
-
Yes, it's still a PCIe device so it has to be passed through.
The pfSense GUI doesn't show it because it hasn't yet been updated to support 4xxx devices: https://redmine.pfsense.org/issues/15233
The kernel will still use it for crypto operations if it's loaded though.
-
@stephenw10 Good to know...thanks.
-
@NollipfSense said in pfSense 23.09 Intel QAT 4xxx passthrough question:
@Lurick Are you running a PCI QAT device? The method you used describes a PCI device...not a CPU with the ability to perform accelerating encryption. In my setup, I use Qat 8950 that's installed in a PCI slot.
@NollipfSense Please, is Qat 8970 much (30-40%+) faster than Qat 8950 ?
Do You have some issues with stability? Overheating?
-
@Sergei_Shablovsky said in pfSense 23.09 Intel QAT 4xxx passthrough question:
Please, is Qat 8970 much (30-40%+) faster than Qat 8950 ?
Do You have some issues with stability? Overheating?
I have never compared however, it should...I got mine from a Chinese seller on eBay as price was very reasonable...QAT 8970 is just too expensive. Mine has never showed any instabilities since installed. It does output heat...never overheated though.
I had hope that QAT was enabled in pfSense for any encrypted browsing but it's not the case...bummer...now that an expensive price on the table, it would be nice of pfSense to enable QAT for all encryption need...waiting.
-
@NollipfSense said in pfSense 23.09 Intel QAT 4xxx passthrough question:
@Sergei_Shablovsky said in pfSense 23.09 Intel QAT 4xxx passthrough question:
Please, is Qat 8970 much (30-40%+) faster than Qat 8950 ?
Do You have some issues with stability? Overheating?
I have never compared however, it should...I got mine from a Chinese seller on eBay as price was very reasonable...
Right now on USA eBay (where PP able to make chargeback, opposite to many DOA from Chinas sellers) QAT8950 cost USD$50-80
QAT 8970 is just too expensive.
Right now on USA eBay price are USD$150-220Because that difference in price I’m asking about speed..:)
Mine has never showed any instabilities since installed. It does output heat...never overheated though.
Is it installed in rack server or just desktop tower?
I had hope that QAT was enabled in pfSense for any encrypted browsing but it's not the case...bummer...now that an expensive price on the table, it would be nice of pfSense to enable QAT for all encryption need...waiting.
But QAT are presented many years ago… I also hate LOOONG pfSense update cycles. ;)
Good luck with QAT using!
-
@Sergei_Shablovsky said in pfSense 23.09 Intel QAT 4xxx passthrough question:
Right now on USA eBay (where PP able to make chargeback, opposite to many DOA from Chinas sellers) QAT8950 cost USD$50-80
I bought mine over a year ago from a Chinese seller for $37, in fact I bought two because at that price each, why not, while at the time, the QAT 8970 by US sellers priced at $800+ So, priced had fallen...that's good. Both mine are installed in work stations, a Lenovo and a Dell...see sig.
