Crypto card BCM5822
-
hi all,
i have 5 crypto cards BCM5822, want recycle it in pfsense boxes.
pfsense detect it on boot, ubsec0 device. but no load and no show in dashboard, in openvpn hardware crypto only show no hardware, bsd crypto and padlock.
how load driver or something?regards.
-
Try using "bsd cryptodev engine" - if FreeBSD recognizes it as a crypto card, that's what would activate it.
It probably doesn't show in the dashboard because we haven't seen the boot message string yet that identifies that card. If you can show us the lines where it's recognized in the boot log that can be fixed for future versions.
-
ok,i post "dmesg" later.
Make "openssl speed x -engine x (i try bsd crypto, ubsec, padlock)" and speed is same in all options.
if you want and shipping is not expensive, I can give you a free card so you can test it.
-
Like many other cards they may only kick in on certain ciphers. Make sure you try different families of ciphers, AES, 3DES, etc.
-
I used some 5821's on 1.2.3. IIRC, they worked with 3DES and AES. They were faster than the Soekris 14xx (hifn) on low-end hardware.
-
i try openssl in aes and 3des :-[ no speedup.
paste dmesg
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 8.1-RELEASE-p4 #0: Tue Sep 13 18:02:33 EDT 2011
root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_wrap.8.i386 i386
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Atom(TM) CPU D525 @ 1.80GHz (1799.97-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x106ca Family = 6 Model = 1c Stepping = 10
Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x40e31d <sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>TSC: P-state invariant
real memory = 1073741824 (1024 MB)
avail memory = 1019285504 (972 MB)
ACPI APIC Table: <gbt ="" gbtuacpi="">FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 HTT threads
cpu0 (BSP): APIC ID: 0
cpu1 (AP/HT): APIC ID: 1
cpu2 (AP): APIC ID: 2
cpu3 (AP/HT): APIC ID: 3
ioapic0: Changing APIC ID to 2
ioapic0 <version 2.0="">irqs 0-23 on motherboard
netisr_init: forcing maxthreads to 1 and bindthreads to 0 for device polling
wlan: mac acl policy registered
[b]cryptosoft0: <software crypto="">on motherboard
padlock0: No ACE support.
acpi0: <gbt gbtuacpi="">on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 3f4e0000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
cpu0: <acpi cpu="">on acpi0
cpu1: <acpi cpu="">on acpi0
cpu2: <acpi cpu="">on acpi0
cpu3: <acpi cpu="">on acpi0
acpi_hpet0: <high precision="" event="" timer="">iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 900
acpi_button0: <power button="">on acpi0
pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0
pci0: <acpi pci="" bus="">on pcib0
vgapci0: <vga-compatible display="">port 0xff00-0xff07 mem 0xfdf00000-0xfdf7ffff,0xd0000000-0xdfffffff,0xfdd00000-0xfddfffff irq 16 at device 2.0 on pci0
pcib1: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0
pci1: <acpi pci="" bus="">on pcib1
re0: <realtek 8111="" 8168="" b="" c="" cp="" d="" dp="" e="" pcie="" gigabit="" ethernet="">port 0xde00-0xdeff mem 0xfd7ff000-0xfd7fffff,0xfd7f8000-0xfd7fbfff irq 16 at device 0.0 on pci1
re0: Using 1 MSI messages
re0: Chip rev. 0x2c000000
re0: MAC rev. 0x00000000
miibus0: <mii bus="">on re0
rgephy0: <rtl8169s 8110s="" 8211b="" media="" interface="">PHY 1 on miibus0
rgephy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
re0: [FILTER]
pcib2: <acpi pci-pci="" bridge="">irq 17 at device 28.1 on pci0
pci2: <acpi pci="" bus="">on pcib2
atapci0: <jmicron jmb363="" udma133="" controller="">port 0xcf00-0xcf07,0xce00-0xce03,0xcd00-0xcd07,0xcc00-0xcc03,0xcb00-0xcb0f mem 0xfdefe000-0xfdefffff irq 17 at device 0.0 on pci2
atapci0: [ITHREAD]
atapci1: <ahci sata="" controller="">on atapci0
atapci1: [ITHREAD]
atapci1: AHCI v1.00 controller with 2 3Gbps ports, PM supported
ata2: <ata 0="" channel="">on atapci1
ata2: [ITHREAD]
ata3: <ata 1="" channel="">on atapci1
ata3: [ITHREAD]
ata4: <ata 0="" channel="">on atapci0
ata4: [ITHREAD]
uhci0: <intel 82801g="" (ich7)="" usb="" controller="" usb-a="">port 0xfe00-0xfe1f irq 23 at device 29.0 on pci0
uhci0: [ITHREAD]
usbus0: <intel 82801g="" (ich7)="" usb="" controller="" usb-a="">on uhci0
uhci1: <intel 82801g="" (ich7)="" usb="" controller="" usb-b="">port 0xfd00-0xfd1f irq 19 at device 29.1 on pci0
uhci1: [ITHREAD]
usbus1: <intel 82801g="" (ich7)="" usb="" controller="" usb-b="">on uhci1
uhci2: <intel 82801g="" (ich7)="" usb="" controller="" usb-c="">port 0xfc00-0xfc1f irq 18 at device 29.2 on pci0
uhci2: [ITHREAD]
usbus2: <intel 82801g="" (ich7)="" usb="" controller="" usb-c="">on uhci2
uhci3: <intel 82801g="" (ich7)="" usb="" controller="" usb-d="">port 0xfb00-0xfb1f irq 16 at device 29.3 on pci0
uhci3: [ITHREAD]
usbus3: <intel 82801g="" (ich7)="" usb="" controller="" usb-d="">on uhci3
ehci0: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">mem 0xfdfff000-0xfdfff3ff irq 23 at device 29.7 on pci0
ehci0: [ITHREAD]
usbus4: EHCI version 1.0
usbus4: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">on ehci0
pcib3: <acpi pci-pci="" bridge="">at device 30.0 on pci0
pci3: <acpi pci="" bus="">on pcib3
pcib4: <pci-pci bridge="">at device 0.0 on pci3
pci4: <pci bus="">on pcib4
pcib5: <pci-pci bridge="">at device 4.0 on pci4
pci5: <pci bus="">on pcib5
fxp0: <intel 100="" 82558="" pro="" ethernet="">port 0xef00-0xef1f mem 0xfd8ff000-0xfd8fffff,0xfdb00000-0xfdbfffff irq 20 at device 4.0 on pci5
fxp0: Enabling Rx lock-up workaround
miibus1: <mii bus="">on fxp0
inphy0: <i82555 10="" 100="" media="" interface="">PHY 1 on miibus1
inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: [ITHREAD]
fxp1: <intel 100="" 82558="" pro="" ethernet="">port 0xee00-0xee1f mem 0xfd8fe000-0xfd8fefff,0xfda00000-0xfdafffff irq 19 at device 5.0 on pci5
fxp1: Enabling Rx lock-up workaround
miibus2: <mii bus="">on fxp1
inphy1: <i82555 10="" 100="" media="" interface="">PHY 1 on miibus2
inphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp1: [ITHREAD]
ubsec0 mem 0xfdcf0000-0xfdcfffff irq 18 at device 6.0 on pci4
ubsec0: [ITHREAD]
ubsec0: Broadcom 5822
isab0: <pci-isa bridge="">at device 31.0 on pci0
isa0: <isa bus="">on isab0
atapci2: <intel ich7="" sata300="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfa00-0xfa0f mem 0xfdffe000-0xfdffe3ff at device 31.2 on pci0
ata0: <ata 0="" channel="">on atapci2
ata0: [ITHREAD]
ata1: <ata 1="" channel="">on atapci2
ata1: [ITHREAD]
pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
atrtc0: <at realtime="" clock="">port 0x70-0x73 on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: [FILTER]
uart0: console (9600,n,8,1)
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
uart1: [FILTER]
ppc0: <parallel port="">port 0x378-0x37f,0x778-0x77b irq 7 drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/16 bytes threshold
ppc0: [ITHREAD]
ppbus0: <parallel port="" bus="">on ppc0
ppi0: <parallel i="" o="">on ppbus0
acpi_throttle0: <acpi cpu="" throttling="">on cpu0
acpi_throttle1: <acpi cpu="" throttling="">on cpu1
acpi_throttle1: failed to attach P_CNT
device_attach: acpi_throttle1 attach returned 6
acpi_throttle2: <acpi cpu="" throttling="">on cpu2
acpi_throttle2: failed to attach P_CNT
device_attach: acpi_throttle2 attach returned 6
acpi_throttle3: <acpi cpu="" throttling="">on cpu3
acpi_throttle3: failed to attach P_CNT
device_attach: acpi_throttle3 attach returned 6
Timecounters tick every 10.000 msec
IPsec: Initialized Security Association Processing.
usbus0: 12Mbps Full Speed USB v1.0
usbus1: 12Mbps Full Speed USB v1.0
ugen0.1: <intel>at usbus0
uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0
ugen1.1: <intel>at usbus1
uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus1
usbus2: 12Mbps Full Speed USB v1.0
usbus3: 12Mbps Full Speed USB v1.0
ugen2.1: <intel>at usbus2
uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus2
ugen3.1: <intel>at usbus3
uhub3: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus3
usbus4: 480Mbps High Speed USB v2.0
ad4: 76315MB <seagate st3808110as="" 3.aad="">at ata2-master PIO4 SATA 3Gb/s
ugen4.1: <intel>at usbus4
uhub4: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus4
uhub0: 2 ports with 2 removable, self powered
ad8: 977MB <sandisk sdcfx-1024="" hdx="" 3.13="">at ata4-master PIO4
uhub1: 2 ports with 2 removable, self powered
SMP: AP CPU #1 Launched!
SMP: AP CPU #2 Launched!
SMP: AP CPU #3 Launched!
uhub2: 2 ports with 2 removable, self powered
uhub3: 2 ports with 2 removable, self powered
Root mount waiting for: usbus4
Root mount waiting for: usbus4
Root mount waiting for: usbus4
uhub4: 8 ports with 8 removable, self powered
Root mount waiting for: usbus4
Trying to mount root from ufs:/dev/ufs/pfsense0
pflog0: promiscuous mode enabled
ovpns2: link state changed to UP
acpi_throttle1: <acpi cpu="" throttling="">on cpu1
acpi_throttle1: failed to attach P_CNT
device_attach: acpi_throttle1 attach returned 6
acpi_throttle2: <acpi cpu="" throttling="">on cpu2
acpi_throttle2: failed to attach P_CNT
device_attach: acpi_throttle2 attach returned 6
acpi_throttle3: <acpi cpu="" throttling="">on cpu3
acpi_throttle3: failed to attach P_CNT
device_attach: acpi_throttle3 attach returned 6
acpi_throttle1: <acpi cpu="" throttling="">on cpu1
acpi_throttle1: failed to attach P_CNT
device_attach: acpi_throttle1 attach returned 6
acpi_throttle2: <acpi cpu="" throttling="">on cpu2
acpi_throttle2: failed to attach P_CNT
device_attach: acpi_throttle2 attach returned 6
acpi_throttle3: <acpi cpu="" throttling="">on cpu3
acpi_throttle3: failed to attach P_CNT
device_attach: acpi_throttle3 attach returned 6
acpi_throttle1: <acpi cpu="" throttling="">on cpu1
acpi_throttle1: failed to attach P_CNT
device_attach: acpi_throttle1 attach returned 6
acpi_throttle2: <acpi cpu="" throttling="">on cpu2
acpi_throttle2: failed to attach P_CNT
device_attach: acpi_throttle2 attach returned 6
acpi_throttle3: <acpi cpu="" throttling="">on cpu3
acpi_throttle3: failed to attach P_CNT
device_attach: acpi_throttle3 attach returned 6
p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
p4tcc1: <cpu frequency="" thermal="" control="">on cpu1
p4tcc2: <cpu frequency="" thermal="" control="">on cpu2
p4tcc3: <cpu frequency="" thermal="" control="">on cpu3
ng0: changing name to 'pppoe0'
fxp1: link state changed to DOWN
fxp1: link state changed to UP
fxp1: link state changed to DOWN
fxp1: link state changed to UP
ad4: TIMEOUT - READ_MUL retrying (1 retry left) LBA=103873503
re0: link state changed to DOWN
ng0: changing name to 'pppoe0'
ovpns2: link state changed to DOWN
ovpns2: link state changed to UP</cpu></cpu></cpu></cpu></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></sandisk></intel></intel></seagate></intel></intel></intel></intel></intel></intel></intel></intel></acpi></acpi></acpi></acpi></parallel></parallel></parallel></at></serial></ata></ata></intel></isa></pci-isa></i82555></mii></intel></i82555></mii></intel></pci></pci-pci></pci></pci-pci></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></ata></ata></ata></ahci></jmicron></acpi></acpi></rtl8169s></mii></realtek></acpi></acpi></vga-compatible></acpi></acpi></power></high></acpi></acpi></acpi></acpi></gbt></software></version></gbt ></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe> -
Try using cryptotest and cryptostats to see if anything is going through the card.
-
openssl speed aes-128-cbc -engine cryptodev
result:
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128 cbc 19636.96k 23452.61k 23642.84k 23839.27k 23896.39kopenssl speed aes-128-cbc
result:
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128 cbc 19982.39k 23152.90k 23564.70k 23844.91k 23848.10kopenssl speed des-ede3 -engine cryptodev
result:
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
des ede3 10119.97k 11683.33k 11757.53k 11736.57k 11804.61kopenssl speed des-ede3
result:
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
des ede3 9727.59k 11616.01k 11670.14k 11794.80k 11744.01ki try engine ubsec but:
can't use that engine
56750:error:2506406A:DSO support routines:DLFCN_BIND_FUNC:could not bind to the requested symbol name:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/dso/dso_dlfcn.c:264:symname(ubsec_bytes_to_bits): Undefined symbol "ubsec_bytes_to_bits"
56750:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/dso/dso_lib.c:294:
56750:error:80069067:ubsec engine:UBSEC_INIT:dso failure:/usr/pfSensesrc/src/secure/lib/libcrypto/engines/libubsec/../../../../../crypto/openssl/engines/e_ubsec.c:433:
56750:error:260B806D:engine routines:ENGINE_TABLE_REGISTER:init failed:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/engine/eng_table.c:161: -
cryptotest
0.001 sec, 2 3des crypts, 8 bytes, 12422 byte/sec, 0.1 Mb/seccryptostats
2 symmetric crypto ops (0 errors, 0 times driver blocked)
47 key ops (2 errors, 0 times driver blocked)
0 crypto dispatch thread activations
47 crypto return thread activations -
any info about this?