[Openswan dev] ocf debian

[David McCullough]

Jivin Harald Jenny lays it down ...
...
> > > > I'm still not entirely sure what that buys though.
> > > 
> > > I'm just proposing it, maybe David can also comment on this? On the other hand,
> > > I think he told me that when no OCF hardware acceleration is found OCF will use
> > > cryptoapi as a fallback, correct? Would this also include hardware acceleration
> > > that can be done by cryptoapi but not OCF or only software?
> > 
> > Yes,  anything crypto API can do OCF can take adavantage of.
> 
> May I ask how much performance penality this brings?

Very little actually.  It is a measurable amount though.
I wrote the ocf-bench driver to test this when using the IXP
access library directly or via OCF,  the difference was acceptable
to us (1-2% at most IIRC)

Cheers,
Davidm

-- 
David McCullough,      david_mccullough at mcafee.com,  Ph:+61 734352815
McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org