Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Crypto card BCM5822

    Scheduled Pinned Locked Moved Hardware
    10 Posts 3 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      frontsidebus
      last edited by

      hi all,
      i have 5 crypto cards BCM5822, want recycle it in pfsense boxes.
      pfsense detect it on boot, ubsec0 device. but no load and no show in dashboard, in openvpn hardware crypto only show no hardware, bsd crypto and padlock.
      how load driver or something?

      regards.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Try using "bsd cryptodev engine" - if FreeBSD recognizes it as a crypto card, that's what would activate it.

        It probably doesn't show in the dashboard because we haven't seen the boot message string yet that identifies that card. If you can show us the lines where it's recognized in the boot log that can be fixed for future versions.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • F
          frontsidebus
          last edited by

          ok,i post "dmesg" later.

          Make "openssl speed x -engine x (i try bsd crypto, ubsec, padlock)" and speed is same in all options.

          if you want and shipping is not expensive, I can give you a free card so you can test it.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            Like many other cards they may only kick in on certain ciphers. Make sure you try different families of ciphers, AES, 3DES, etc.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • dotdashD
              dotdash
              last edited by

              I used some 5821's on 1.2.3. IIRC, they worked with 3DES and AES. They were faster than the Soekris 14xx (hifn) on low-end hardware.

              1 Reply Last reply Reply Quote 0
              • F
                frontsidebus
                last edited by

                i try openssl in aes and 3des  :-[ no speedup.

                paste dmesg

                FreeBSD is a registered trademark of The FreeBSD Foundation.
                FreeBSD 8.1-RELEASE-p4 #0: Tue Sep 13 18:02:33 EDT 2011
                    root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_wrap.8.i386 i386
                Timecounter "i8254" frequency 1193182 Hz quality 0
                CPU: Intel(R) Atom(TM) CPU D525  @ 1.80GHz (1799.97-MHz 686-class CPU)
                  Origin = "GenuineIntel"  Id = 0x106ca  Family = 6  Model = 1c  Stepping = 10
                  Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x40e31d <sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>TSC: P-state invariant
                real memory  = 1073741824 (1024 MB)
                avail memory = 1019285504 (972 MB)
                ACPI APIC Table: <gbt   ="" gbtuacpi="">FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
                FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 HTT threads
                cpu0 (BSP): APIC ID:  0
                cpu1 (AP/HT): APIC ID:  1
                cpu2 (AP): APIC ID:  2
                cpu3 (AP/HT): APIC ID:  3
                ioapic0: Changing APIC ID to 2
                ioapic0 <version 2.0="">irqs 0-23 on motherboard
                netisr_init: forcing maxthreads to 1 and bindthreads to 0 for device polling
                wlan: mac acl policy registered
                [b]cryptosoft0: <software crypto="">on motherboard
                padlock0: No ACE support.
                acpi0: <gbt gbtuacpi="">on motherboard
                acpi0: [ITHREAD]
                acpi0: Power Button (fixed)
                acpi0: reservation of 0, a0000 (3) failed
                acpi0: reservation of 100000, 3f4e0000 (3) failed
                Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
                acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
                cpu0: <acpi cpu="">on acpi0
                cpu1: <acpi cpu="">on acpi0
                cpu2: <acpi cpu="">on acpi0
                cpu3: <acpi cpu="">on acpi0
                acpi_hpet0: <high precision="" event="" timer="">iomem 0xfed00000-0xfed003ff on acpi0
                Timecounter "HPET" frequency 14318180 Hz quality 900
                acpi_button0: <power button="">on acpi0
                pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0
                pci0: <acpi pci="" bus="">on pcib0
                vgapci0: <vga-compatible display="">port 0xff00-0xff07 mem 0xfdf00000-0xfdf7ffff,0xd0000000-0xdfffffff,0xfdd00000-0xfddfffff irq 16 at device 2.0 on pci0
                pcib1: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0
                pci1: <acpi pci="" bus="">on pcib1
                re0: <realtek 8111="" 8168="" b="" c="" cp="" d="" dp="" e="" pcie="" gigabit="" ethernet="">port 0xde00-0xdeff mem 0xfd7ff000-0xfd7fffff,0xfd7f8000-0xfd7fbfff irq 16 at device 0.0 on pci1
                re0: Using 1 MSI messages
                re0: Chip rev. 0x2c000000
                re0: MAC rev. 0x00000000
                miibus0: <mii bus="">on re0
                rgephy0: <rtl8169s 8110s="" 8211b="" media="" interface="">PHY 1 on miibus0
                rgephy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
                re0: [FILTER]
                pcib2: <acpi pci-pci="" bridge="">irq 17 at device 28.1 on pci0
                pci2: <acpi pci="" bus="">on pcib2
                atapci0: <jmicron jmb363="" udma133="" controller="">port 0xcf00-0xcf07,0xce00-0xce03,0xcd00-0xcd07,0xcc00-0xcc03,0xcb00-0xcb0f mem 0xfdefe000-0xfdefffff irq 17 at device 0.0 on pci2
                atapci0: [ITHREAD]
                atapci1: <ahci sata="" controller="">on atapci0
                atapci1: [ITHREAD]
                atapci1: AHCI v1.00 controller with 2 3Gbps ports, PM supported
                ata2: <ata 0="" channel="">on atapci1
                ata2: [ITHREAD]
                ata3: <ata 1="" channel="">on atapci1
                ata3: [ITHREAD]
                ata4: <ata 0="" channel="">on atapci0
                ata4: [ITHREAD]
                uhci0: <intel 82801g="" (ich7)="" usb="" controller="" usb-a="">port 0xfe00-0xfe1f irq 23 at device 29.0 on pci0
                uhci0: [ITHREAD]
                usbus0: <intel 82801g="" (ich7)="" usb="" controller="" usb-a="">on uhci0
                uhci1: <intel 82801g="" (ich7)="" usb="" controller="" usb-b="">port 0xfd00-0xfd1f irq 19 at device 29.1 on pci0
                uhci1: [ITHREAD]
                usbus1: <intel 82801g="" (ich7)="" usb="" controller="" usb-b="">on uhci1
                uhci2: <intel 82801g="" (ich7)="" usb="" controller="" usb-c="">port 0xfc00-0xfc1f irq 18 at device 29.2 on pci0
                uhci2: [ITHREAD]
                usbus2: <intel 82801g="" (ich7)="" usb="" controller="" usb-c="">on uhci2
                uhci3: <intel 82801g="" (ich7)="" usb="" controller="" usb-d="">port 0xfb00-0xfb1f irq 16 at device 29.3 on pci0
                uhci3: [ITHREAD]
                usbus3: <intel 82801g="" (ich7)="" usb="" controller="" usb-d="">on uhci3
                ehci0: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">mem 0xfdfff000-0xfdfff3ff irq 23 at device 29.7 on pci0
                ehci0: [ITHREAD]
                usbus4: EHCI version 1.0
                usbus4: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">on ehci0
                pcib3: <acpi pci-pci="" bridge="">at device 30.0 on pci0
                pci3: <acpi pci="" bus="">on pcib3
                pcib4: <pci-pci bridge="">at device 0.0 on pci3
                pci4: <pci bus="">on pcib4
                pcib5: <pci-pci bridge="">at device 4.0 on pci4
                pci5: <pci bus="">on pcib5
                fxp0: <intel 100="" 82558="" pro="" ethernet="">port 0xef00-0xef1f mem 0xfd8ff000-0xfd8fffff,0xfdb00000-0xfdbfffff irq 20 at device 4.0 on pci5
                fxp0: Enabling Rx lock-up workaround
                miibus1: <mii bus="">on fxp0
                inphy0: <i82555 10="" 100="" media="" interface="">PHY 1 on miibus1
                inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
                fxp0: [ITHREAD]
                fxp1: <intel 100="" 82558="" pro="" ethernet="">port 0xee00-0xee1f mem 0xfd8fe000-0xfd8fefff,0xfda00000-0xfdafffff irq 19 at device 5.0 on pci5
                fxp1: Enabling Rx lock-up workaround
                miibus2: <mii bus="">on fxp1
                inphy1: <i82555 10="" 100="" media="" interface="">PHY 1 on miibus2
                inphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
                fxp1: [ITHREAD]
                ubsec0 mem 0xfdcf0000-0xfdcfffff irq 18 at device 6.0 on pci4
                ubsec0: [ITHREAD]
                ubsec0: Broadcom 5822

                isab0: <pci-isa bridge="">at device 31.0 on pci0
                isa0: <isa bus="">on isab0
                atapci2: <intel ich7="" sata300="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfa00-0xfa0f mem 0xfdffe000-0xfdffe3ff at device 31.2 on pci0
                ata0: <ata 0="" channel="">on atapci2
                ata0: [ITHREAD]
                ata1: <ata 1="" channel="">on atapci2
                ata1: [ITHREAD]
                pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
                atrtc0: <at realtime="" clock="">port 0x70-0x73 on acpi0
                uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
                uart0: [FILTER]
                uart0: console (9600,n,8,1)
                uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
                uart1: [FILTER]
                ppc0: <parallel port="">port 0x378-0x37f,0x778-0x77b irq 7 drq 3 on acpi0
                ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
                ppc0: FIFO with 16/16/16 bytes threshold
                ppc0: [ITHREAD]
                ppbus0: <parallel port="" bus="">on ppc0
                ppi0: <parallel i="" o="">on ppbus0
                acpi_throttle0: <acpi cpu="" throttling="">on cpu0
                acpi_throttle1: <acpi cpu="" throttling="">on cpu1
                acpi_throttle1: failed to attach P_CNT
                device_attach: acpi_throttle1 attach returned 6
                acpi_throttle2: <acpi cpu="" throttling="">on cpu2
                acpi_throttle2: failed to attach P_CNT
                device_attach: acpi_throttle2 attach returned 6
                acpi_throttle3: <acpi cpu="" throttling="">on cpu3
                acpi_throttle3: failed to attach P_CNT
                device_attach: acpi_throttle3 attach returned 6
                Timecounters tick every 10.000 msec
                IPsec: Initialized Security Association Processing.
                usbus0: 12Mbps Full Speed USB v1.0
                usbus1: 12Mbps Full Speed USB v1.0
                ugen0.1: <intel>at usbus0
                uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0
                ugen1.1: <intel>at usbus1
                uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus1
                usbus2: 12Mbps Full Speed USB v1.0
                usbus3: 12Mbps Full Speed USB v1.0
                ugen2.1: <intel>at usbus2
                uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus2
                ugen3.1: <intel>at usbus3
                uhub3: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus3
                usbus4: 480Mbps High Speed USB v2.0
                ad4: 76315MB <seagate st3808110as="" 3.aad="">at ata2-master PIO4 SATA 3Gb/s
                ugen4.1: <intel>at usbus4
                uhub4: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus4
                uhub0: 2 ports with 2 removable, self powered
                ad8: 977MB <sandisk sdcfx-1024="" hdx="" 3.13="">at ata4-master PIO4
                uhub1: 2 ports with 2 removable, self powered
                SMP: AP CPU #1 Launched!
                SMP: AP CPU #2 Launched!
                SMP: AP CPU #3 Launched!
                uhub2: 2 ports with 2 removable, self powered
                uhub3: 2 ports with 2 removable, self powered
                Root mount waiting for: usbus4
                Root mount waiting for: usbus4
                Root mount waiting for: usbus4
                uhub4: 8 ports with 8 removable, self powered
                Root mount waiting for: usbus4
                Trying to mount root from ufs:/dev/ufs/pfsense0
                pflog0: promiscuous mode enabled
                ovpns2: link state changed to UP
                acpi_throttle1: <acpi cpu="" throttling="">on cpu1
                acpi_throttle1: failed to attach P_CNT
                device_attach: acpi_throttle1 attach returned 6
                acpi_throttle2: <acpi cpu="" throttling="">on cpu2
                acpi_throttle2: failed to attach P_CNT
                device_attach: acpi_throttle2 attach returned 6
                acpi_throttle3: <acpi cpu="" throttling="">on cpu3
                acpi_throttle3: failed to attach P_CNT
                device_attach: acpi_throttle3 attach returned 6
                acpi_throttle1: <acpi cpu="" throttling="">on cpu1
                acpi_throttle1: failed to attach P_CNT
                device_attach: acpi_throttle1 attach returned 6
                acpi_throttle2: <acpi cpu="" throttling="">on cpu2
                acpi_throttle2: failed to attach P_CNT
                device_attach: acpi_throttle2 attach returned 6
                acpi_throttle3: <acpi cpu="" throttling="">on cpu3
                acpi_throttle3: failed to attach P_CNT
                device_attach: acpi_throttle3 attach returned 6
                acpi_throttle1: <acpi cpu="" throttling="">on cpu1
                acpi_throttle1: failed to attach P_CNT
                device_attach: acpi_throttle1 attach returned 6
                acpi_throttle2: <acpi cpu="" throttling="">on cpu2
                acpi_throttle2: failed to attach P_CNT
                device_attach: acpi_throttle2 attach returned 6
                acpi_throttle3: <acpi cpu="" throttling="">on cpu3
                acpi_throttle3: failed to attach P_CNT
                device_attach: acpi_throttle3 attach returned 6
                p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
                p4tcc1: <cpu frequency="" thermal="" control="">on cpu1
                p4tcc2: <cpu frequency="" thermal="" control="">on cpu2
                p4tcc3: <cpu frequency="" thermal="" control="">on cpu3
                ng0: changing name to 'pppoe0'
                fxp1: link state changed to DOWN
                fxp1: link state changed to UP
                fxp1: link state changed to DOWN
                fxp1: link state changed to UP
                ad4: TIMEOUT - READ_MUL retrying (1 retry left) LBA=103873503
                re0: link state changed to DOWN
                ng0: changing name to 'pppoe0'
                ovpns2: link state changed to DOWN
                ovpns2: link state changed to UP</cpu></cpu></cpu></cpu></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></sandisk></intel></intel></seagate></intel></intel></intel></intel></intel></intel></intel></intel></acpi></acpi></acpi></acpi></parallel></parallel></parallel></at></serial></ata></ata></intel></isa></pci-isa></i82555></mii></intel></i82555></mii></intel></pci></pci-pci></pci></pci-pci></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></ata></ata></ata></ahci></jmicron></acpi></acpi></rtl8169s></mii></realtek></acpi></acpi></vga-compatible></acpi></acpi></power></high></acpi></acpi></acpi></acpi></gbt></software></version></gbt ></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>

                1 Reply Last reply Reply Quote 0
                • jimpJ
                  jimp Rebel Alliance Developer Netgate
                  last edited by

                  Try using cryptotest and cryptostats to see if anything is going through the card.

                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                  Need help fast? Netgate Global Support!

                  Do not Chat/PM for help!

                  1 Reply Last reply Reply Quote 0
                  • F
                    frontsidebus
                    last edited by

                    openssl speed aes-128-cbc -engine cryptodev
                    result:
                    type                 16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
                    aes-128 cbc      19636.96k    23452.61k    23642.84k    23839.27k    23896.39k

                    openssl speed aes-128-cbc
                    result:
                    type                    16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
                    aes-128 cbc      19982.39k    23152.90k    23564.70k    23844.91k    23848.10k

                    openssl speed des-ede3 -engine cryptodev
                    result:
                    type                  16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
                    des ede3         10119.97k    11683.33k    11757.53k    11736.57k    11804.61k

                    openssl speed des-ede3
                    result:
                    type                  16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
                    des ede3          9727.59k    11616.01k    11670.14k    11794.80k    11744.01k

                    i try engine ubsec but:
                    can't use that engine
                    56750:error:2506406A:DSO support routines:DLFCN_BIND_FUNC:could not bind to the requested symbol name:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/dso/dso_dlfcn.c:264:symname(ubsec_bytes_to_bits): Undefined symbol "ubsec_bytes_to_bits"
                    56750:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/dso/dso_lib.c:294:
                    56750:error:80069067:ubsec engine:UBSEC_INIT:dso failure:/usr/pfSensesrc/src/secure/lib/libcrypto/engines/libubsec/../../../../../crypto/openssl/engines/e_ubsec.c:433:
                    56750:error:260B806D:engine routines:ENGINE_TABLE_REGISTER:init failed:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/engine/eng_table.c:161:

                    1 Reply Last reply Reply Quote 0
                    • F
                      frontsidebus
                      last edited by

                      cryptotest
                        0.001 sec,      2  3des crypts,      8 bytes,    12422 byte/sec,    0.1 Mb/sec

                      cryptostats
                      2 symmetric crypto ops (0 errors, 0 times driver blocked)
                      47 key ops (2 errors, 0 times driver blocked)
                      0 crypto dispatch thread activations
                      47 crypto return thread activations

                      1 Reply Last reply Reply Quote 0
                      • F
                        frontsidebus
                        last edited by

                        any info about this?

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.