Community discussions

 
andlommy
just joined
Topic Author
Posts: 21
Joined: Tue Feb 12, 2013 12:14 am

HW Offload AES-CBC IPSEC in CHR

Mon May 27, 2019 1:14 am

Hi!
This has been discussed before, but a solution hasn't been found, so let's see if there are any ideas.
Setup:


CHR (4.45beta50) running in Azure (Hyper-v)
CPU there does have AES-NI extensions (verified with coreinfo)

IPSEC is setup to AES-CBC with SHA256.
No hardware offload

IPSEC is setup to AES-CTR with SHA256
Hardware offload is on

IPSEC is setup to AES-GCM with SHA256
Hardware offload is on.

Is there a reason AES-CBC is specially picky and does not do hardware offloading?
Trying to pair the CHR with a Hex router, which only supports AES-CBC :(

Thanks

Who is online

Users browsing this forum: No registered users and 92 guests