Re: [Openvpn-users] RE: Scalability?

[Jamie Lokier <jamie@xxxxxxxxxxxxx>]

Eugen Leitl wrote:
> On Wed, Mar 02, 2005 at 12:09:05PM -0500, Andreas Iwanowski wrote:
> > Maybe a PCI-X 64 bit card?
> 
> Maybe a CPU which has native crypto support. 2.6.11 is out today, and
> contains Padlock support
> http://lists.logix.cz/pipermail/padlock/2005/000017.html
> 
> http://www.logix.cz/michal/devel/padlock/bench.xp
> 
> Then C5J (due this year) will have better crypto support still:
> 
> http://www.iapplianceweb.com/story/OEG20040520I0001BC.htm

I've read that the VIA CPUs have instructions which help implementing
symmetric crypto like AES, but are not much use for asymmetric
public-key crypto such as the slowest part of certificate verification,
and session key generation.

If that's true, they will speed up ordinary tunnelling a little bit,
but not the certificate checks and periodic rekeying.

And, being VIA CPUs, they're not very powerful for general operations
in comparison with Intel and AMD CPUs.

-- Jamie

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users