Does Mikrotik utilize AES-NI instructions and max encr speed

RouterOS General
1

Hi!

I am looking for a budgetary solution for the following task: have two server rooms, dedicated direct fiber optic between them, need to create L2 encrypted connection (could be L2 tunnel over L3 encrypted vpn or just data encryption). Encryption should be AES 128-256 bit, near gigabit speed.

Is this possible with Mikrotik and do you have any tests for AES encryption on PC based routers with modern CPUs?
Does Mikrotik support and utilize Intel AES-NI and are there any tests for Mikrotik RouterOS?

Thank you.

2

I’m also interested in this. I’m planning on using an x86 ROS as VPN GW, and was wondering about the same thing. It would be nice if 5.x already supported AES-NI.

3

You may want to email support@mikrotik.com.

4

I think it’s a general enough question to be answered here on the forums. I might additionally send a support query though.

5

some RB1x00 has hardware acceleration for IPsec encryption, AFAIR

6

I tested OpenSSL in various distributions (Debían, Archlinux, etc) with AES-flag processor enabled and have 5x performance.

Can the OpenSSL implementation of RouterOS benefits from the use of AES-NI enabled processors?

I send this question to support mail, no reply.

7

if you have access to - try latest development build for ssh

8

I have the same question like topic starter.
Does Mikrotik support and utilize Intel AES-NI and are there any tests for Mikrotik RouterOS?
I’m also wish have near Gigabit AES-128 traffic.

9

Hello,

Does RouterOS x86 support AES-NI instructions?