Print Page - OPNsense on Atom Processor and encryption

Title: OPNsense on Atom Processor and encryption
Post by: sweetfoxxy on January 11, 2021, 10:54:30 AM

Hi

I need a bit of your experience and help
Q1: Does OPNsense support Intel Atom processors?
Q2: Is it possible to use hardware-based encryption with OPNsense?

Nadzya

Title: Re: OPNsense on Atom Processor and encryption
Post by: bartjsmit on January 11, 2021, 11:00:44 AM

Hi Nadzya,

Atom CPU's are supported as long as they have an Intel 64-bit instruction set. For crypto hardware-assist, check that they support Intel AES New Instructions.

The Ark is your friend: https://ark.intel.com/content/www/us/en/ark.html and search for the model number.

Performance is of course another matter - especially for IDS, VPN, web proxy, etc.

Bart...

Title: Re: OPNsense on Atom Processor and encryption
Post by: Matriciel on January 11, 2021, 11:02:51 AM

Hi,
It must support Atom but, it no enough power for firewall usage
It is possible to use hardware encryption, but, Atom processor don't have AES-NI IMHO

Title: Re: OPNsense on Atom Processor and encryption
Post by: chemlud on January 11, 2021, 11:44:47 AM

Quote from: Matriciel on January 11, 2021, 11:02:51 AM
Hi,
It must support Atom but, it no enough power for firewall usage

Nonsense, sorry...

QuoteIt is possible to use hardware encryption, but, Atom processor don't have AES-NI IMHO

Nonsense again, e.g.

https://ark.intel.com/content/www/us/en/ark/products/97937/intel-atom-processor-c3558-8m-cache-up-to-2-20-ghz.html

Title: Re: OPNsense on Atom Processor and encryption
Post by: Matriciel on January 11, 2021, 11:47:43 AM

I'm sorry but, in first post, this in no infos about atom reference.
The C3558 has AES-NI but olders Atom no ...

No context in demande, no contexte in response ;)

Title: Re: OPNsense on Atom Processor and encryption
Post by: sweetfoxxy on January 11, 2021, 12:02:27 PM

Thank you for your replies!

I have one follow-up question
How to enable hardware encryption on OPNsense? And also, can OPNsense use, for instance, Intel QAT API for cryptographic hw acceleration?
Please, share your knowledge

BR
Nadzya

Title: Re: OPNsense on Atom Processor and encryption
Post by: bartjsmit on January 11, 2021, 06:27:03 PM

Quote from: nadzya on January 11, 2021, 12:02:27 PM
How to enable hardware encryption on OPNsense?

System, Settings, Miscellaneous, Hardware acceleration

Bart...

Title: Re: OPNsense on Atom Processor and encryption
Post by: netnut on January 14, 2021, 04:37:59 AM

Quote from: bartjsmit on January 11, 2021, 06:27:03 PM
Quote from: nadzya on January 11, 2021, 12:02:27 PM
How to enable hardware encryption on OPNsense?

System, Settings, Miscellaneous, Hardware acceleration

Bart...

That's the (generic) Atom AES-NI acceleration.

_Some_ Atom SoC's have an extra dedicated QAT engine (encryption / compression), so you can (partly) offload the Atom offloading ;-).

There's a FreeBSD driver available and provided by Intel: https://01.org/intel-quickassist-technology

This isn't (yet) supported by OPNsense, is it ?

OPNsense Forum

English Forums => Hardware and Performance => Topic started by: sweetfoxxy on January 11, 2021, 10:54:30 AM