is something like this supported
http://www.abit-usa.com/products/servers/products.php?categories=4&model=185
it has a cavium IPSEC accelerator on it..
can’t find nothing on it in the manual so probaly not supported.
but just asking…
Yup, not supported
400Mbit vpn ipsec 3des traffic…
if it would be supported i would put ipsec vpn over all our connections…
but it’s not… 
The majority of CPU power will go to interrupt processing… 
it’s always the same.
if you think you found something cool… better think again..
my bad.
better just upgrade my hardware…
It would be the most reliable solution.
could you look in to my other topic about the intel chipset problem??
thxs man
IMHO
I’d persist in the “future plan” to support IPSEC accelerators -
- Soekris sell hardware encryptor mini-PCI cards
- there are linux drivers for them
and from competing “solutions”
- CISCO now have hardware accelerators in their low-end routers
and it should means you are be able to use a cheaper/lower heat CPU on the mainboard.
Regards
On Cisco they could probably make a difference as it is not based on PCI architecture. But all MiniPCI cards provide no or little improvement (or even a decrease in spead on fast processors!!!) as all the information has to travel at least 3 times on PCI bus, no matter how fast the device is (and note that I have just forgot to mention additional interrupts generated by the “accelerator”). Of course, on heavy algorithms and 200MHz processors I could probably understand the presence of a throughput gain, but if we are talking about 1GHz+ systems, then the CPU can encrypt the data faster than PCI bus latency. A win-win strategy is to embed encryption coprocessors in either CPUs (like VIA does) or in network cards (like most wireless chip manufacturers do, but that coprocessors are not going to make any IPsec)
Ah that makes lots of sense -
Soekris makes/sells 266MHz CPU boards, and that’s where the IPSEC cards come into their own - CPU power is limiting, rather than PCI bus bandwidth/interrupt rates.
I guess there will be further developments in this space …
Regards
You can use hardware aes encryption in RouterOS with some wireless interfaces.
As about standalone IPsec accelerators, they dramatically decrease performance on small packets even on RB 200 (remember about interrupts!), but give a noticeable gain on large ones (and yes, only on slow systems).