Messages

[ports: both LibreSSL and OpenSSL now support AES-NI acceleration]

Hi Ad,

I don't buy yet my hardware, so I will consider your applicance.

But I don't understand one thing: in opnsense's blog, I read

ports: both LibreSSL and OpenSSL now support AES-NI acceleration

for 15.7.17 release.

Alessandro

If I'm not mistaken it's the combination openvpn / libressl which can't use aesni, although I expect you will still do 100Mbps with libressl and your board.

For my curiosity, why openvpn/libressl can't use aesni?

I think supermicro mb is capable to get 100mbps with openvpn but with more CPU usage: so more heat, so more noise (I would like to get a silent router).

OpnSense continue to support OpenSSL?

Thanks

Alessandro

That means with LibreSLL I can't use AES-NI?

Alessandro

Hi,

I would like to change my actual router, an asus rtn16, with an diy machine based on supermicro mb a1srm 2758 (atom cup 8 core) with ssd, 8gb ram.

I need to use it as vpn gateway with my vpn provider: my wan speed is 100mbps.

With my asus router I get only 10 Mbps as wan speed when I use openvpn (router cpu limit) but with supermicro mb (ads-ni, Intel quickassist) I need to know if opnsense I will get full wan speed.

In few words, opnsense is capable to use aes-ni with openvpn (or l2tp-ipsec) ?

Thanks in advance

Alessandro