Hello
anyone knows the exact specifications about the IPSEC hw offload?
I have tried 128/256 AES-CBC CTR and GCM, SHA1/256 and always appears AEAD offload enabled.
To be sure I have enabled 256/CTR and SHA256, it seems working fine with low cpu.
anyone has more precise informations?
Hi,
are you sure that ATL supports IPSec HW offload? There is no separate results there: https://mikrotik.com/product/atl18#fndtn-testresults
These devices that support offload have special IPSec section listed.
Well, I dont know if they support IPSEC HW offload or not, this is the reason I asked on the forum. Maybe the ARM cpu already has some instruction onboard.
In the IPSEC section, I see the H for HARDWARE AEAD enabled…
The cpu is quite low if I try to pass some encrypted traffic.
If we search on the docs:
88F3720 that is the CPU of the ATL…
IPsec • IPsec ESP and AH Packet Transform • Support for latest Ipsec RFCs (3566, 430x, 4434, 4543, 4868) • Extended Sequence Number Support • Replay protection • Full header and trailer processing • IPv4/IPv6 support (RFC-4301) and header updates
here:
https://gzhls.at/blob/ldb/2/7/4/2/6eacf9661c5a2d20c4d7cd3328ffba47bfd6.pdf
Security • High-performance security offload engine including IPSec, SSL, DTLS, and IKE