Re: [Ocf-linux-users] About OCF Linux

[David M. <Dav...@se...>]

Jivin carl zhu lays it down ...
> Hi David,
> 
>    I have got your OCF linux code, but I have some question about it.
> because source forge's mail list seems no one to answer. I send the mail to
> you.

I have not seen any mailing list mails or "pending" messages.  Are you
sending to the correct address ?  You should subscribe before mailing
to get a better response time.

>   the questions are:
>   1, I use ocf-bench, get such result:
> Using /lib/modules/2.4.32-uc0/kernel/ocf/ocf-bench.o
> Crypto Speed tests
> OCF: testing ...
> OCF: 1044 requests of 1500 bytes in 17 jiffies
> IXP: testing ...
> IXP: 1044 requests of 1500 bytes in 13 jiffies
>     lsmod's result:
>     Module                  Size  Used by
> ixp4xx                  5672   0 (unused)
> cryptodev               5868   0 (unused)
> ocf                    15616   0 [ixp4xx cryptodev]
> ixp425_eth             16700   2
> ixp400                412032   0 [ixp4xx ixp425_eth]
>    But I use openswan to build the VPN, the tcp throughput will be 3 Mbps,
> if not use VPN, the throughput will be 70Mbps.
>    I dont know why? I think I can get 40-50Mbps in VPN...

On an IXP you should get from 38-45Mbps depening on clock speed etc.

3Mbps is slow even for software crypto.  Make sure you do not have
cryptosoft loaded.

>  2, Due to problem 1, I think the root cause may happened on OCF crypto API
> with Openswan, but I can't find any document to discuss it. Do you have
> some?

Most likely you have openswan configured incorrectly.  Check that
CONFIG_KLIPS_OCF is enabled in the kernel build.

Run "cryptotest" and check the throughput.  If everything look
accelerated,  then you need to work out what is wrong with your openswan
build/compile that is not enabled OCF support.

Cheers,
Davidm

-- 
David McCullough,  dav...@se...,   Ph:+61 734352815
Secure Computing - SnapGear  http://www.uCdot.org http://www.cyberguard.com