Crypto card BCM5822



  • hi all,
    i have 5 crypto cards BCM5822, want recycle it in pfsense boxes.
    pfsense detect it on boot, ubsec0 device. but no load and no show in dashboard, in openvpn hardware crypto only show no hardware, bsd crypto and padlock.
    how load driver or something?

    regards.


  • Rebel Alliance Developer Netgate

    Try using "bsd cryptodev engine" - if FreeBSD recognizes it as a crypto card, that's what would activate it.

    It probably doesn't show in the dashboard because we haven't seen the boot message string yet that identifies that card. If you can show us the lines where it's recognized in the boot log that can be fixed for future versions.



  • ok,i post "dmesg" later.

    Make "openssl speed x -engine x (i try bsd crypto, ubsec, padlock)" and speed is same in all options.

    if you want and shipping is not expensive, I can give you a free card so you can test it.


  • Rebel Alliance Developer Netgate

    Like many other cards they may only kick in on certain ciphers. Make sure you try different families of ciphers, AES, 3DES, etc.



  • I used some 5821's on 1.2.3. IIRC, they worked with 3DES and AES. They were faster than the Soekris 14xx (hifn) on low-end hardware.



  • i try openssl in aes and 3des  :-[ no speedup.

    paste dmesg

    FreeBSD is a registered trademark of The FreeBSD Foundation.
    FreeBSD 8.1-RELEASE-p4 #0: Tue Sep 13 18:02:33 EDT 2011
        root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_wrap.8.i386 i386
    Timecounter "i8254" frequency 1193182 Hz quality 0
    CPU: Intel(R) Atom(TM) CPU D525  @ 1.80GHz (1799.97-MHz 686-class CPU)
      Origin = "GenuineIntel"  Id = 0x106ca  Family = 6  Model = 1c  Stepping = 10
      Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x40e31d <sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>TSC: P-state invariant
    real memory  = 1073741824 (1024 MB)
    avail memory = 1019285504 (972 MB)
    ACPI APIC Table: <gbt   ="" gbtuacpi="">FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
    FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 HTT threads
    cpu0 (BSP): APIC ID:  0
    cpu1 (AP/HT): APIC ID:  1
    cpu2 (AP): APIC ID:  2
    cpu3 (AP/HT): APIC ID:  3
    ioapic0: Changing APIC ID to 2
    ioapic0 <version 2.0="">irqs 0-23 on motherboard
    netisr_init: forcing maxthreads to 1 and bindthreads to 0 for device polling
    wlan: mac acl policy registered
    [b]cryptosoft0: <software crypto="">on motherboard
    padlock0: No ACE support.
    acpi0: <gbt gbtuacpi="">on motherboard
    acpi0: [ITHREAD]
    acpi0: Power Button (fixed)
    acpi0: reservation of 0, a0000 (3) failed
    acpi0: reservation of 100000, 3f4e0000 (3) failed
    Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
    acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
    cpu0: <acpi cpu="">on acpi0
    cpu1: <acpi cpu="">on acpi0
    cpu2: <acpi cpu="">on acpi0
    cpu3: <acpi cpu="">on acpi0
    acpi_hpet0: <high precision="" event="" timer="">iomem 0xfed00000-0xfed003ff on acpi0
    Timecounter "HPET" frequency 14318180 Hz quality 900
    acpi_button0: <power button="">on acpi0
    pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0
    pci0: <acpi pci="" bus="">on pcib0
    vgapci0: <vga-compatible display="">port 0xff00-0xff07 mem 0xfdf00000-0xfdf7ffff,0xd0000000-0xdfffffff,0xfdd00000-0xfddfffff irq 16 at device 2.0 on pci0
    pcib1: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0
    pci1: <acpi pci="" bus="">on pcib1
    re0: <realtek 8111="" 8168="" b="" c="" cp="" d="" dp="" e="" pcie="" gigabit="" ethernet="">port 0xde00-0xdeff mem 0xfd7ff000-0xfd7fffff,0xfd7f8000-0xfd7fbfff irq 16 at device 0.0 on pci1
    re0: Using 1 MSI messages
    re0: Chip rev. 0x2c000000
    re0: MAC rev. 0x00000000
    miibus0: <mii bus="">on re0
    rgephy0: <rtl8169s 8110s="" 8211b="" media="" interface="">PHY 1 on miibus0
    rgephy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
    re0: [FILTER]
    pcib2: <acpi pci-pci="" bridge="">irq 17 at device 28.1 on pci0
    pci2: <acpi pci="" bus="">on pcib2
    atapci0: <jmicron jmb363="" udma133="" controller="">port 0xcf00-0xcf07,0xce00-0xce03,0xcd00-0xcd07,0xcc00-0xcc03,0xcb00-0xcb0f mem 0xfdefe000-0xfdefffff irq 17 at device 0.0 on pci2
    atapci0: [ITHREAD]
    atapci1: <ahci sata="" controller="">on atapci0
    atapci1: [ITHREAD]
    atapci1: AHCI v1.00 controller with 2 3Gbps ports, PM supported
    ata2: <ata 0="" channel="">on atapci1
    ata2: [ITHREAD]
    ata3: <ata 1="" channel="">on atapci1
    ata3: [ITHREAD]
    ata4: <ata 0="" channel="">on atapci0
    ata4: [ITHREAD]
    uhci0: <intel 82801g="" (ich7)="" usb="" controller="" usb-a="">port 0xfe00-0xfe1f irq 23 at device 29.0 on pci0
    uhci0: [ITHREAD]
    usbus0: <intel 82801g="" (ich7)="" usb="" controller="" usb-a="">on uhci0
    uhci1: <intel 82801g="" (ich7)="" usb="" controller="" usb-b="">port 0xfd00-0xfd1f irq 19 at device 29.1 on pci0
    uhci1: [ITHREAD]
    usbus1: <intel 82801g="" (ich7)="" usb="" controller="" usb-b="">on uhci1
    uhci2: <intel 82801g="" (ich7)="" usb="" controller="" usb-c="">port 0xfc00-0xfc1f irq 18 at device 29.2 on pci0
    uhci2: [ITHREAD]
    usbus2: <intel 82801g="" (ich7)="" usb="" controller="" usb-c="">on uhci2
    uhci3: <intel 82801g="" (ich7)="" usb="" controller="" usb-d="">port 0xfb00-0xfb1f irq 16 at device 29.3 on pci0
    uhci3: [ITHREAD]
    usbus3: <intel 82801g="" (ich7)="" usb="" controller="" usb-d="">on uhci3
    ehci0: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">mem 0xfdfff000-0xfdfff3ff irq 23 at device 29.7 on pci0
    ehci0: [ITHREAD]
    usbus4: EHCI version 1.0
    usbus4: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">on ehci0
    pcib3: <acpi pci-pci="" bridge="">at device 30.0 on pci0
    pci3: <acpi pci="" bus="">on pcib3
    pcib4: <pci-pci bridge="">at device 0.0 on pci3
    pci4: <pci bus="">on pcib4
    pcib5: <pci-pci bridge="">at device 4.0 on pci4
    pci5: <pci bus="">on pcib5
    fxp0: <intel 100="" 82558="" pro="" ethernet="">port 0xef00-0xef1f mem 0xfd8ff000-0xfd8fffff,0xfdb00000-0xfdbfffff irq 20 at device 4.0 on pci5
    fxp0: Enabling Rx lock-up workaround
    miibus1: <mii bus="">on fxp0
    inphy0: <i82555 10="" 100="" media="" interface="">PHY 1 on miibus1
    inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
    fxp0: [ITHREAD]
    fxp1: <intel 100="" 82558="" pro="" ethernet="">port 0xee00-0xee1f mem 0xfd8fe000-0xfd8fefff,0xfda00000-0xfdafffff irq 19 at device 5.0 on pci5
    fxp1: Enabling Rx lock-up workaround
    miibus2: <mii bus="">on fxp1
    inphy1: <i82555 10="" 100="" media="" interface="">PHY 1 on miibus2
    inphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
    fxp1: [ITHREAD]
    ubsec0 mem 0xfdcf0000-0xfdcfffff irq 18 at device 6.0 on pci4
    ubsec0: [ITHREAD]
    ubsec0: Broadcom 5822

    isab0: <pci-isa bridge="">at device 31.0 on pci0
    isa0: <isa bus="">on isab0
    atapci2: <intel ich7="" sata300="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfa00-0xfa0f mem 0xfdffe000-0xfdffe3ff at device 31.2 on pci0
    ata0: <ata 0="" channel="">on atapci2
    ata0: [ITHREAD]
    ata1: <ata 1="" channel="">on atapci2
    ata1: [ITHREAD]
    pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
    atrtc0: <at realtime="" clock="">port 0x70-0x73 on acpi0
    uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
    uart0: [FILTER]
    uart0: console (9600,n,8,1)
    uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
    uart1: [FILTER]
    ppc0: <parallel port="">port 0x378-0x37f,0x778-0x77b irq 7 drq 3 on acpi0
    ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
    ppc0: FIFO with 16/16/16 bytes threshold
    ppc0: [ITHREAD]
    ppbus0: <parallel port="" bus="">on ppc0
    ppi0: <parallel i="" o="">on ppbus0
    acpi_throttle0: <acpi cpu="" throttling="">on cpu0
    acpi_throttle1: <acpi cpu="" throttling="">on cpu1
    acpi_throttle1: failed to attach P_CNT
    device_attach: acpi_throttle1 attach returned 6
    acpi_throttle2: <acpi cpu="" throttling="">on cpu2
    acpi_throttle2: failed to attach P_CNT
    device_attach: acpi_throttle2 attach returned 6
    acpi_throttle3: <acpi cpu="" throttling="">on cpu3
    acpi_throttle3: failed to attach P_CNT
    device_attach: acpi_throttle3 attach returned 6
    Timecounters tick every 10.000 msec
    IPsec: Initialized Security Association Processing.
    usbus0: 12Mbps Full Speed USB v1.0
    usbus1: 12Mbps Full Speed USB v1.0
    ugen0.1: <intel>at usbus0
    uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0
    ugen1.1: <intel>at usbus1
    uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus1
    usbus2: 12Mbps Full Speed USB v1.0
    usbus3: 12Mbps Full Speed USB v1.0
    ugen2.1: <intel>at usbus2
    uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus2
    ugen3.1: <intel>at usbus3
    uhub3: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus3
    usbus4: 480Mbps High Speed USB v2.0
    ad4: 76315MB <seagate st3808110as="" 3.aad="">at ata2-master PIO4 SATA 3Gb/s
    ugen4.1: <intel>at usbus4
    uhub4: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus4
    uhub0: 2 ports with 2 removable, self powered
    ad8: 977MB <sandisk sdcfx-1024="" hdx="" 3.13="">at ata4-master PIO4
    uhub1: 2 ports with 2 removable, self powered
    SMP: AP CPU #1 Launched!
    SMP: AP CPU #2 Launched!
    SMP: AP CPU #3 Launched!
    uhub2: 2 ports with 2 removable, self powered
    uhub3: 2 ports with 2 removable, self powered
    Root mount waiting for: usbus4
    Root mount waiting for: usbus4
    Root mount waiting for: usbus4
    uhub4: 8 ports with 8 removable, self powered
    Root mount waiting for: usbus4
    Trying to mount root from ufs:/dev/ufs/pfsense0
    pflog0: promiscuous mode enabled
    ovpns2: link state changed to UP
    acpi_throttle1: <acpi cpu="" throttling="">on cpu1
    acpi_throttle1: failed to attach P_CNT
    device_attach: acpi_throttle1 attach returned 6
    acpi_throttle2: <acpi cpu="" throttling="">on cpu2
    acpi_throttle2: failed to attach P_CNT
    device_attach: acpi_throttle2 attach returned 6
    acpi_throttle3: <acpi cpu="" throttling="">on cpu3
    acpi_throttle3: failed to attach P_CNT
    device_attach: acpi_throttle3 attach returned 6
    acpi_throttle1: <acpi cpu="" throttling="">on cpu1
    acpi_throttle1: failed to attach P_CNT
    device_attach: acpi_throttle1 attach returned 6
    acpi_throttle2: <acpi cpu="" throttling="">on cpu2
    acpi_throttle2: failed to attach P_CNT
    device_attach: acpi_throttle2 attach returned 6
    acpi_throttle3: <acpi cpu="" throttling="">on cpu3
    acpi_throttle3: failed to attach P_CNT
    device_attach: acpi_throttle3 attach returned 6
    acpi_throttle1: <acpi cpu="" throttling="">on cpu1
    acpi_throttle1: failed to attach P_CNT
    device_attach: acpi_throttle1 attach returned 6
    acpi_throttle2: <acpi cpu="" throttling="">on cpu2
    acpi_throttle2: failed to attach P_CNT
    device_attach: acpi_throttle2 attach returned 6
    acpi_throttle3: <acpi cpu="" throttling="">on cpu3
    acpi_throttle3: failed to attach P_CNT
    device_attach: acpi_throttle3 attach returned 6
    p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
    p4tcc1: <cpu frequency="" thermal="" control="">on cpu1
    p4tcc2: <cpu frequency="" thermal="" control="">on cpu2
    p4tcc3: <cpu frequency="" thermal="" control="">on cpu3
    ng0: changing name to 'pppoe0'
    fxp1: link state changed to DOWN
    fxp1: link state changed to UP
    fxp1: link state changed to DOWN
    fxp1: link state changed to UP
    ad4: TIMEOUT - READ_MUL retrying (1 retry left) LBA=103873503
    re0: link state changed to DOWN
    ng0: changing name to 'pppoe0'
    ovpns2: link state changed to DOWN
    ovpns2: link state changed to UP</cpu></cpu></cpu></cpu></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></sandisk></intel></intel></seagate></intel></intel></intel></intel></intel></intel></intel></intel></acpi></acpi></acpi></acpi></parallel></parallel></parallel></at></serial></ata></ata></intel></isa></pci-isa></i82555></mii></intel></i82555></mii></intel></pci></pci-pci></pci></pci-pci></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></ata></ata></ata></ahci></jmicron></acpi></acpi></rtl8169s></mii></realtek></acpi></acpi></vga-compatible></acpi></acpi></power></high></acpi></acpi></acpi></acpi></gbt></software></version></gbt ></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>


  • Rebel Alliance Developer Netgate

    Try using cryptotest and cryptostats to see if anything is going through the card.



  • openssl speed aes-128-cbc -engine cryptodev
    result:
    type                 16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
    aes-128 cbc      19636.96k    23452.61k    23642.84k    23839.27k    23896.39k

    openssl speed aes-128-cbc
    result:
    type                    16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
    aes-128 cbc      19982.39k    23152.90k    23564.70k    23844.91k    23848.10k

    openssl speed des-ede3 -engine cryptodev
    result:
    type                  16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
    des ede3         10119.97k    11683.33k    11757.53k    11736.57k    11804.61k

    openssl speed des-ede3
    result:
    type                  16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
    des ede3          9727.59k    11616.01k    11670.14k    11794.80k    11744.01k

    i try engine ubsec but:
    can't use that engine
    56750:error:2506406A:DSO support routines:DLFCN_BIND_FUNC:could not bind to the requested symbol name:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/dso/dso_dlfcn.c:264:symname(ubsec_bytes_to_bits): Undefined symbol "ubsec_bytes_to_bits"
    56750:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/dso/dso_lib.c:294:
    56750:error:80069067:ubsec engine:UBSEC_INIT:dso failure:/usr/pfSensesrc/src/secure/lib/libcrypto/engines/libubsec/../../../../../crypto/openssl/engines/e_ubsec.c:433:
    56750:error:260B806D:engine routines:ENGINE_TABLE_REGISTER:init failed:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/engine/eng_table.c:161:



  • cryptotest
      0.001 sec,      2  3des crypts,      8 bytes,    12422 byte/sec,    0.1 Mb/sec

    cryptostats
    2 symmetric crypto ops (0 errors, 0 times driver blocked)
    47 key ops (2 errors, 0 times driver blocked)
    0 crypto dispatch thread activations
    47 crypto return thread activations



  • any info about this?


Locked