I'm wondering if OPNsense will add support for the Chelsio ccr crypto driver, since OPNsense already supports
hifn
padlock
qat
safe
According to freebsd release notes for 13.3 (https://www.freebsd.org/releases/13.3R/hardware/) and 14.0 (https://www.freebsd.org/releases/14.0R/hardware/), ccr driver by Chelsio is listed.
I found out how to use the ccr driver, just make sure you are using the ccX device, and ccr_load=YES
if you need netmap with the ccX device, you can enable by setting
hw.cxgbe.native_netmap=3
Native netmap support. bit 0 = main VI, bit 1 = extra VIs
afterwards, ipsec should work with the ccr driver and you can check the stats via sysctl dev.ccr