OPNsense Forum
English Forums => Hardware and Performance => Topic started by: sweetfoxxy on January 11, 2021, 10:54:30 am
-
Hi
I need a bit of your experience and help
Q1: Does OPNsense support Intel Atom processors?
Q2: Is it possible to use hardware-based encryption with OPNsense?
Nadzya
-
Hi Nadzya,
Atom CPU's are supported as long as they have an Intel 64-bit instruction set. For crypto hardware-assist, check that they support Intel AES New Instructions.
The Ark is your friend: https://ark.intel.com/content/www/us/en/ark.html and search for the model number.
Performance is of course another matter - especially for IDS, VPN, web proxy, etc.
Bart...
-
Hi,
It must support Atom but, it no enough power for firewall usage
It is possible to use hardware encryption, but, Atom processor don't have AES-NI IMHO
-
Hi,
It must support Atom but, it no enough power for firewall usage
Nonsense, sorry...
It is possible to use hardware encryption, but, Atom processor don't have AES-NI IMHO
Nonsense again, e.g.
https://ark.intel.com/content/www/us/en/ark/products/97937/intel-atom-processor-c3558-8m-cache-up-to-2-20-ghz.html
-
I'm sorry but, in first post, this in no infos about atom reference.
The C3558 has AES-NI but olders Atom no ...
No context in demande, no contexte in response ;)
-
Thank you for your replies!
I have one follow-up question
How to enable hardware encryption on OPNsense? And also, can OPNsense use, for instance, Intel QAT API for cryptographic hw acceleration?
Please, share your knowledge
BR
Nadzya
-
How to enable hardware encryption on OPNsense?
System, Settings, Miscellaneous, Hardware acceleration
Bart...
-
How to enable hardware encryption on OPNsense?
System, Settings, Miscellaneous, Hardware acceleration
Bart...
That's the (generic) Atom AES-NI acceleration.
_Some_ Atom SoC's have an extra dedicated QAT engine (encryption / compression), so you can (partly) offload the Atom offloading ;-).
There's a FreeBSD driver available and provided by Intel: https://01.org/intel-quickassist-technology
This isn't (yet) supported by OPNsense, is it ?