Crypto Hardware Acceleration

[hina]

I'm wondering if OPNsense will add support for the Chelsio ccr crypto driver, since OPNsense already supports

hifn
padlock
qat
safe

According to freebsd release notes for 13.3 (https://www.freebsd.org/releases/13.3R/hardware/) and 14.0 (https://www.freebsd.org/releases/14.0R/hardware/), ccr driver by Chelsio is listed.

[hina]

I found out how to use the ccr driver, just make sure you are using the ccX device, and ccr_load=YES

if you need netmap with the ccX device, you can enable by setting

hw.cxgbe.native_netmap=3
Native netmap support. bit 0 = main VI, bit 1 = extra VIs

afterwards, ipsec should work with the ccr driver and you can check the stats via sysctl dev.ccr