[Openswan Users] GBit performance

Nick Howitt n1ck.h0w1tt at gmail.com
Fri Nov 27 08:26:24 EST 2009


As a thought, you could look at something built round the Via Nano 
processors (http://www.via.com.tw/en/products/processors/nano/) and some 
of their older C7 processors. They support hardware encryption (these 
are the "padlock" messages you see when starting ipsec). They claim AES 
encryption at up to 25Gbps and SHA-1 and SHA-256 at up to 5Gbps. 
Openswan supports this natively.

The only problem is that as fully featured server, the chips are 
probably under powered.

I am not sure which motherboards use these processors.


On 27/11/2009 08:44, Michael Schwartzkopff wrote:
> Hi,
> I search through some documents but I found no satisfying answers. So perhaps
> you can help me.
> We want to use plain linux servers a a VPN gateway to encrypt up to 1 GBit/s.
> If this possible with standard servers?
> If yes, what servers (CPU, dual-core, quad-core, speed) would you suggest?
> If I need hardware acceleration: Is there a good guide for:
> - What cards / chips really work?
> - What additional software do I need?
> - Do I need to patch anything (kernel, openswan, ...)?
> - HOWTO install this?
> Thanks for any further help.

More information about the Users mailing list