Re: [Openvpn-users] RE: Scalability?

[Martijn Lievaart <m@xxxxxxx>]

Jamie Lokier wrote:

> I've read that the VIA CPUs have instructions which help implementing
> symmetric crypto like AES, but are not much use for asymmetric
> public-key crypto such as the slowest part of certificate verification,
> and session key generation.
>  

True, AFAIK.

> If that's true, they will speed up ordinary tunnelling a little bit,
> but not the certificate checks and periodic rekeying.
>  

True, AFAIK.

> And, being VIA CPUs, they're not very powerful for general operations
> in comparison with Intel and AMD CPUs.
>  

Running a low-end via board on a server myself, I can state it should be 
fine for most  uses (my OpenVPN links terminate on a lowly P90 just 
fine, the via is low-end, but /much/ more powerful than a P90). But it 
/is/ underpowered compared to even the cheapest desktop today and I 
would be hesitant to run a lot of tunnels on it without first testing if 
it can handle the load.

OTOH, the cheapest Via board would make a fine embedded OpenVPN 
appliance, but that's completely something else.

M4



____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users