network card with inline crypto engine?

network card with inline crypto engine?

[Jean-Christophe DUBOIS]

Hi,

Just a quick question: 

Is there in the linux tree a "reference" implementation for a network card
with inline crypto engine that would be used for IPSEC among other things.

Could you point me to such network card/linux driver?

Thanks

JC

Re: network card with inline crypto engine?

[David Miller]

From: Jean-Christophe DUBOIS <jcd@tribudubois.net>
Date: Tue, 19 Aug 2008 10:16:56 +0200

> Is there in the linux tree a "reference" implementation for a network card
> with inline crypto engine that would be used for IPSEC among other things.

Not really.

Once there was an attempt to support the crypto offload some
older 3com networking cards have, but that never went anywhere
and the hooks that were added by that code to the IPSEC stack
were never in a clean and usable state so never were merged.

Re: network card with inline crypto engine?

[Jean-Christophe DUBOIS]

Thanks Dave,

I guess you are refering to this proposal:

http://oss.sgi.com/archives/netdev/2005-01/msg00347.html

And nothing is in the plan at the moment?

JC

On Tue, 19 Aug 2008 01:50:36 -0700 (PDT), David Miller
<davem@davemloft.net> wrote:
> From: Jean-Christophe DUBOIS <jcd@tribudubois.net>
> Date: Tue, 19 Aug 2008 10:16:56 +0200
> 
>> Is there in the linux tree a "reference" implementation for a network
> card
>> with inline crypto engine that would be used for IPSEC among other
> things.
> 
> Not really.
> 
> Once there was an attempt to support the crypto offload some
> older 3com networking cards have, but that never went anywhere
> and the hooks that were added by that code to the IPSEC stack
> were never in a clean and usable state so never were merged.
> --
> To unsubscribe from this list: send the line "unsubscribe netdev" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: network card with inline crypto engine?

[David Dillow]

On Tue, 2008-08-19 at 16:38 +0200, Jean-Christophe DUBOIS wrote:
> Thanks Dave,
> 
> I guess you are refering to this proposal:
> 
> http://oss.sgi.com/archives/netdev/2005-01/msg00347.html
> 
> And nothing is in the plan at the moment?

I assume that's the one he's referring to. I started reworking it, but
then life intervened. I'd like to finish it off, but it seems somewhat
pointless now with the Typhoon cards.

I'd differ on the usable, but he's right it wasn't the cleanest
possible.

Re: network card with inline crypto engine?

[Jean-Christophe Dubois]

Thanks David,

Out of curiosity, did you maintain you patch since 2.6.10/2.6.12? It seems you 
were integrating comments but I don't think there has been a second 
submission from you. It would be too bad to let it get lost.

As for the fact that it is not perfect yet, it just leave room for 
improvement. ;-)

Regards

JC

Le Tuesday 19 August 2008 19:51:39 David Dillow, vous avez écrit :
> On Tue, 2008-08-19 at 16:38 +0200, Jean-Christophe DUBOIS wrote:
> > Thanks Dave,
> >
> > I guess you are refering to this proposal:
> >
> > http://oss.sgi.com/archives/netdev/2005-01/msg00347.html
> >
> > And nothing is in the plan at the moment?
>
> I assume that's the one he's referring to. I started reworking it, but
> then life intervened. I'd like to finish it off, but it seems somewhat
> pointless now with the Typhoon cards.
>
> I'd differ on the usable, but he's right it wasn't the cleanest
> possible.
> --
> To unsubscribe from this list: send the line "unsubscribe netdev" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: network card with inline crypto engine?

[David Dillow]

On Tue, 2008-08-19 at 21:10 +0200, Jean-Christophe Dubois wrote:
> Thanks David,
> 
> Out of curiosity, did you maintain you patch since 2.6.10/2.6.12? It seems you 
> were integrating comments but I don't think there has been a second 
> submission from you. It would be too bad to let it get lost.

We have the list archives for that! :)

I never finished updating it, and I've archived the WIP somewhere I'm
sure. So much has changed since then that it would likely be better to
start from scratch using the comments Dave made then.

Do you have a new device to use? I'd probably have finished it some time
ago, but the Typhoon is 100 MBps w/ 3DES, which doesn't seem
particularly useful these days with Gigabit AES links out there. I'm
also not sure if they still make the cards, though you can usually find
them on eBay. Intel makes a Pro100/S that does 3DES if I recall, but
it's the same issues, and they didn't seem interested in giving out docs
to it.