Re: [Openvpn-users] RE: Scalability?

[Eugen Leitl <eugen@xxxxxxxxx>]

On Wed, Mar 02, 2005 at 09:21:43PM +0000, Jamie Lokier wrote:

> > Then C5J (due this year) will have better crypto support still:
> > 
> > http://www.iapplianceweb.com/story/OEG20040520I0001BC.htm
> 
> I've read that the VIA CPUs have instructions which help implementing
> symmetric crypto like AES, but are not much use for asymmetric

Current VIAs only have RNG and AES.

> public-key crypto such as the slowest part of certificate verification,
> and session key generation.

C5J core will have other goodies, see above URL.
 
> If that's true, they will speed up ordinary tunnelling a little bit,
> but not the certificate checks and periodic rekeying.
> 
> And, being VIA CPUs, they're not very powerful for general operations
> in comparison with Intel and AMD CPUs.

They have good OPS/W ratio though, and are cheap and high-density (I package
two mini-ITX 1.2 GHz systems in 1U for some 700 EUR total). Having more hardware in the
rack reduces number of points of failures.

I'm using them for NFS and crypto, and web farm stuff. There are uses for
iron like Newisys 2100, but these burn kWh, and are not very cheap.

-- 
Eugen* Leitl <a href="http://leitl.org";>leitl</a>
______________________________________________________________
ICBM: 48.07078, 11.61144            http://www.leitl.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
http://moleculardevices.org         http://nanomachines.net

Attachment: pgpXZuCYl5iWu.pgp
Description: PGP signature