[Openswan dev] ocf debian
david_mccullough at mcafee.com
Fri Dec 17 22:22:57 EST 2010
Jivin Harald Jenny lays it down ...
> > > > I'm still not entirely sure what that buys though.
> > >
> > > I'm just proposing it, maybe David can also comment on this? On the other hand,
> > > I think he told me that when no OCF hardware acceleration is found OCF will use
> > > cryptoapi as a fallback, correct? Would this also include hardware acceleration
> > > that can be done by cryptoapi but not OCF or only software?
> > Yes, anything crypto API can do OCF can take adavantage of.
> May I ask how much performance penality this brings?
Very little actually. It is a measurable amount though.
I wrote the ocf-bench driver to test this when using the IXP
access library directly or via OCF, the difference was acceptable
to us (1-2% at most IIRC)
David McCullough, david_mccullough at mcafee.com, Ph:+61 734352815
McAfee - SnapGear http://www.mcafee.com http://www.uCdot.org
More information about the Dev