[Openswan Users] GBit performance

[Nick Howitt]

Michael,

As a thought, you could look at something built round the Via Nano 
processors (http://www.via.com.tw/en/products/processors/nano/) and some 
of their older C7 processors. They support hardware encryption (these 
are the "padlock" messages you see when starting ipsec). They claim AES 
encryption at up to 25Gbps and SHA-1 and SHA-256 at up to 5Gbps. 
Openswan supports this natively.

The only problem is that as fully featured server, the chips are 
probably under powered.

I am not sure which motherboards use these processors.

Nick

On 27/11/2009 08:44, Michael Schwartzkopff wrote:
> Hi,
>
> I search through some documents but I found no satisfying answers. So perhaps
> you can help me.
>
> We want to use plain linux servers a a VPN gateway to encrypt up to 1 GBit/s.
>
> If this possible with standard servers?
> If yes, what servers (CPU, dual-core, quad-core, speed) would you suggest?
>
> If I need hardware acceleration: Is there a good guide for:
> - What cards / chips really work?
> - What additional software do I need?
> - Do I need to patch anything (kernel, openswan, ...)?
> - HOWTO install this?
>
> Thanks for any further help.
>
>