is something like this supported

http://www.abit-usa.com/products/server ... &model=185

it has a cavium IPSEC accelerator on it..
can't find nothing on it in the manual so probaly not supported.
but just asking...

Yup, not supported

400Mbit vpn ipsec 3des traffic...

if it would be supported i would put ipsec vpn over all our connections...

but it's not...

The majority of CPU power will go to interrupt processing...

它总是相同的。
if you think you found something cool... better think again..
my bad.

better just upgrade my hardware...

better just upgrade my hardware...

It would be the most reliable solution.

could you look in to my other topic about the intel chipset problem??

thxs man

IMHO
我坚持“未来plan" to support IPSEC accelerators -

- Soekris sell hardware encryptor mini-PCI cards
- there are linux drivers for them

and from competing "solutions"
- CISCO now have hardware accelerators in their low-end routers

and it should means you are be able to use a cheaper/lower heat CPU on the mainboard.

Regards

On Cisco they could probably make a difference as it is not based on PCI architecture. But all MiniPCI cards provide no or little improvement (or even a decrease in spead on fast processors!!!) as all the information has to travel at least 3 times on PCI bus, no matter how fast the device is (and note that I have just forgot to mention additional interrupts generated by the "accelerator"). Of course, on heavy algorithms and 200MHz processors I could probably understand the presence of a throughput gain, but if we are talking about 1GHz+ systems, then the CPU can encrypt the data faster than PCI bus latency. A win-win strategy is to embed encryption coprocessors in either CPUs (like VIA does) or in network cards (like most wireless chip manufacturers do, but that coprocessors are not going to make any IPsec)

Ah that makes lots of sense -

Soekris makes/sells 266MHz CPU boards, and that's where the IPSEC cards come into their own - CPU power is limiting, rather than PCI bus bandwidth/interrupt rates.
I guess there will be further developments in this space ...

Regards

You can use hardware aes encryption in RouterOS with some wireless interfaces.

As about standalone IPsec accelerators, they dramatically decrease performance on small packets even on RB 200 (remember about interrupts!), but give a noticeable gain on large ones (and yes, only on slow systems).