Community discussions

MikroTik App
 
SethM
just joined
Topic Author
Posts: 20
Joined: Fri Jan 14, 2011 6:44 pm

Adding Hardware Crypto?

Sun Jun 19, 2011 5:06 am

Has anyone tried adding a mini-pci crypto card (like this Hifn one) to their Mikrotik?
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Adding Hardware Crypto?

Sun Jun 19, 2011 6:34 pm

From my understanding of how hardware crypto works in Linux this is a fairly black and white thing with RouterOS: are the drivers in the standard Linux kernel and is the module them used by the standard crypto libraries without any other configuration requirements? If yes, it'll work. If no, it will not.

That said some RouterBOARD models have crypto acceleration.
 
wpeople
Member
Member
Posts: 380
Joined: Sat May 26, 2007 6:36 pm

Re: Adding Hardware Crypto?

Sun Jun 19, 2011 11:00 pm

as i know, only RB1000 and RB1100AH has the crypto accelerator. those soekris not supported - and as i know, crypto accelerated intel server cards also NOT works (as accelerator)
 
SethM
just joined
Topic Author
Posts: 20
Joined: Fri Jan 14, 2011 6:44 pm

Re: Adding Hardware Crypto?

Mon Jun 20, 2011 10:55 pm

Thanks for the responses. I have a Hifn card so I ordered a RB433 and I'm going to give it a try for fun to see what happens.
 
wpeople
Member
Member
Posts: 380
Joined: Sat May 26, 2007 6:36 pm

Re: Adding Hardware Crypto?

Tue Jun 21, 2011 10:36 am

using Linux on the board - it should work. I think, with ROS, it will not work, but please let us know.
 
SethM
just joined
Topic Author
Posts: 20
Joined: Fri Jan 14, 2011 6:44 pm

Re: Adding Hardware Crypto?

Thu Jun 30, 2011 11:36 pm

I tried on an RB433 and the Hifn card showed up as an unknown device. On the x86 build of RouterOS it was recognized by name in the resources window. I'll have to do some additional testing and post some screenshots when I have time.
 
SethM
just joined
Topic Author
Posts: 20
Joined: Fri Jan 14, 2011 6:44 pm

Re: Adding Hardware Crypto?

Mon Oct 31, 2011 1:35 am

Unfortunately RouterOS does not support mini PCI crypto accelerators based on my experiments, although I feel that such a thing would be nice to set up VPN endpoints (or even small concentrators) without taking a hit on CPU for crypto. The Hifn cards are already pretty popular under Linux. Being able to add a crypto accelerator when and where it's needed would be a huge bonus to any Routerboard.

Who is online

Users browsing this forum: CaptainRisky and 55 guests