I'm trying to get routed OpenVPN to work with a couple of VIA C7 machines on FreeBSD 6.2 so I can utilize the Padlock engine to accelerate OpenVPN. So far it's not working for some reason and I'm not sure why. I have a server machine with a single nic behind a FreeBSD 6.2 IPF firewall and a single nic FreeBSD 6.2 client machine and I've set it up so the subnet behind the client can access the subnet behind the server. This all works fine except for the fact that the Padlock acceleration isn't working. I'm trying to use 'cipher AES-128-CBC' on both the server and client and I also put 'engine padlock' at the end of both config files.
When I run an openssl speed test using the padlock engine it's significantly faster than the cryptodev engine, so it seems like padlock is working, but it's not with OpenVPN because I notice no speed difference at all. When I run 'openssl engine padlock' it returns '(padlock) VIA PadLock (no-RNG, ACE)'. I have crypto.ko, cryptodev.ko, and padlock.ko loading at startup. When the system starts, it displays the following errors: Padlock: 'No ACE support.' and 'module_register_init: MOD_LOAD (padlock, 0xc34cd57c, 0) error 22'. Another odd thing is that when I run 'dmesg | grep CPU' it returns this:
It seems that the OS isn't properly recognizing the CPU, which might be part of the problem, but I'm not sure what to do about that. How do you guys think I should proceed? Try FreeBSD 7.2?
When I run an openssl speed test using the padlock engine it's significantly faster than the cryptodev engine, so it seems like padlock is working, but it's not with OpenVPN because I notice no speed difference at all. When I run 'openssl engine padlock' it returns '(padlock) VIA PadLock (no-RNG, ACE)'. I have crypto.ko, cryptodev.ko, and padlock.ko loading at startup. When the system starts, it displays the following errors: Padlock: 'No ACE support.' and 'module_register_init: MOD_LOAD (padlock, 0xc34cd57c, 0) error 22'. Another odd thing is that when I run 'dmesg | grep CPU' it returns this:
Code:
CPU: VIA/IDT Unknown (1999.59-MHz 686-class CPU)
cpu0: <ACPI CPU> on acpi0
acpi_perf0: <ACPI CPU Frequency Control> on cpu0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
CPU: VIA/IDT Unknown (1999.60-MHz 686-class CPU)
cpu0: <ACPI CPU> on acpi0
acpi_perf0: <ACPI CPU Frequency Control> on cpu0
acpi_throttle0: <ACPI CPU Throttling> on cpu0