Pfsense hardware crypto

amd geode (LX800) har indbygget support for hardware cryptering

i pfsense/freebsd hånderes det af glxsb.

for at slå modulet til

først prøv med:

kldload glxsb

og derefter for at slå til på permanent basis

/etc/rc.conf_mount_rw
echo glxsb_load="YES" >> /boot/loader.conf
/etc/rc.conf_mount_ro

om det er sat op, probe med:

kldstat #viser moduler loaded
dmesg | grep -i glxsb
sysctl -a | grep crypto

Eller via pfsense config System -> Advanced -> Miscellaneous -> Cryptographic Hardware Acceleration

Hvis modulet virker kan man teste med

openssl speed aes-128-cbc

kontra

openssl speed aes-128-cbc -engine cryptodev

openssl speed -elapsed -evp aes-128-cbc
openssl speed -engine cryptodev -elapsed -evp aes-128-cbc

eller

dd if=/dev/zero bs=4k count=100000 | openssl enc -aes-128-cbc -e -out /dev/null -nosalt -k abcdefhij

kontra

dd if=/dev/zero bs=4k count=100000 | openssl enc -aes-128-cbc -e -out /dev/null -nosalt -k abcdefhij -engine cryptodev

Navigation menu