OPNsense on Atom Processor and encryption

[sweetfoxxy]

Hi

I need a bit of your experience and help
Q1: Does OPNsense support Intel Atom processors?
Q2: Is it possible to use hardware-based encryption with OPNsense?

Nadzya

[bartjsmit]

Hi Nadzya,

Atom CPU's are supported as long as they have an Intel 64-bit instruction set. For crypto hardware-assist, check that they support Intel AES New Instructions.

The Ark is your friend: https://ark.intel.com/content/www/us/en/ark.html and search for the model number.

Performance is of course another matter - especially for IDS, VPN, web proxy, etc.

Bart...

[Matriciel]

Hi,
It must support Atom but, it no enough power for firewall usage
It is possible to use hardware encryption, but, Atom processor don't have AES-NI   IMHO

[chemlud]

Hi,
It must support Atom but, it no enough power for firewall usage

Nonsense, sorry...

It is possible to use hardware encryption, but, Atom processor don't have AES-NI   IMHO

Nonsense again, e.g.

https://ark.intel.com/content/www/us/en/ark/products/97937/intel-atom-processor-c3558-8m-cache-up-to-2-20-ghz.html

[Matriciel]

I'm sorry but, in first post, this in no infos about atom reference.
The C3558 has AES-NI but olders Atom no ...

No context in demande, no contexte in response 

[sweetfoxxy]

Thank you for your replies!

I have one follow-up question
How to enable hardware encryption on OPNsense? And also, can OPNsense use, for instance, Intel QAT API for cryptographic hw acceleration?
Please, share your knowledge

BR
Nadzya

[bartjsmit]

How to enable hardware encryption on OPNsense?

System, Settings, Miscellaneous, Hardware acceleration

Bart...

[netnut]

How to enable hardware encryption on OPNsense?

System, Settings, Miscellaneous, Hardware acceleration

Bart...

That's the (generic) Atom AES-NI acceleration.

_Some_ Atom SoC's have an extra dedicated QAT engine (encryption / compression), so you can (partly) offload the Atom offloading ;-).

There's a FreeBSD driver available and provided by Intel: https://01.org/intel-quickassist-technology

This isn't (yet) supported by OPNsense, is it ?