Re: [Ocf-linux-users] About OCF Linux

[David M. <Dav...@se...>]

Hi Carl,

Ok,  there are some bits missing from the openswan in your source tree
when using snapgear-3.4.

        edit snapgear/linux-2.4.x/net/ipsec/Makefile, add the following to the
        first instance of EXTRA_CFLAGS:

                -I$(ROOTDIR)/modules/ocf

        edit snapgear/openswan/linux/net/ipsec/Config.in.os2_4,  add the
        following line after the CONFIG_KLIPS_DEBUG line near the end.

                bool '   IPsec: OCF HW Acceleration support' CONFIG_KLIPS_OCF

That should get you going.  To rebuild do:

        make clean
        make oldconfig
                (answer y to KLIPS_OCF)
        make dep
        make

See if that fixes it,  if not let me know and I sort it out,

Cheers,
Davidm


Jivin carl zhu lays it down ...
> here you are, I have attached.
> 
> On 8/31/07, David McCullough <Dav...@se...> wrote:
> >
> >
> > Jivin carl zhu lays it down ...
> > > Hi David,
> > >
> > >     Glad to find you response so quickly.:)
> > >     Do you work for Snapgear?
> >
> > Yes.
> >
> > > I use snapgear v3.4 and ixp csr 1.4 with
> >
> > That is what we use.
> >
> > > crypto to build the code. My device is ADI Coyote like.
> > >     I just get the code and patch the driver to let it use
> > ethernet/crypto.
> >
> > Did you use the snapgear CSR patch ?
> >
> >
> > http://ftp.snapgear.org/pub/snapgear/src/snapgear-modules-20061012.sh
> >
> > Do you do a make config and enable OCF and the appropriate modules ?
> >
> > > Then I get such performance.(openswan + linux2.4.x)
> >
> > So are you now getting full performance or not ?
> >
> > If not,  send me a copy these files and I should be able to sort it out.
> >
> >        snapgear/linux-2.4.x/.config
> >        snapgear/modules/.config
> >        snapgear/config/.config
> >
> > Cheers.
> > Davidm
> >
> > > On 8/31/07, David McCullough <Dav...@se...>
> > wrote:
> > > >
> > > >
> > > > Jivin carl zhu lays it down ...
> > > > > Hi David,
> > > > >
> > > > >    I have got your OCF linux code, but I have some question about
> > it.
> > > > > because source forge's mail list seems no one to answer. I send the
> > mail
> > > > to
> > > > > you.
> > > >
> > > > I have not seen any mailing list mails or "pending" messages.  Are you
> > > > sending to the correct address ?  You should subscribe before mailing
> > > > to get a better response time.
> > > >
> > > > >   the questions are:
> > > > >   1, I use ocf-bench, get such result:
> > > > > Using /lib/modules/2.4.32-uc0/kernel/ocf/ocf-bench.o
> > > > > Crypto Speed tests
> > > > > OCF: testing ...
> > > > > OCF: 1044 requests of 1500 bytes in 17 jiffies
> > > > > IXP: testing ...
> > > > > IXP: 1044 requests of 1500 bytes in 13 jiffies
> > > > >     lsmod's result:
> > > > >     Module                  Size  Used by
> > > > > ixp4xx                  5672   0 (unused)
> > > > > cryptodev               5868   0 (unused)
> > > > > ocf                    15616   0 [ixp4xx cryptodev]
> > > > > ixp425_eth             16700   2
> > > > > ixp400                412032   0 [ixp4xx ixp425_eth]
> > > > >    But I use openswan to build the VPN, the tcp throughput will be 3
> > > > Mbps,
> > > > > if not use VPN, the throughput will be 70Mbps.
> > > > >    I dont know why? I think I can get 40-50Mbps in VPN...
> > > >
> > > > On an IXP you should get from 38-45Mbps depening on clock speed etc.
> > > >
> > > > 3Mbps is slow even for software crypto.  Make sure you do not have
> > > > cryptosoft loaded.
> > > >
> > > > >  2, Due to problem 1, I think the root cause may happened on OCF
> > crypto
> > > > API
> > > > > with Openswan, but I can't find any document to discuss it. Do you
> > have
> > > > > some?
> > > >
> > > > Most likely you have openswan configured incorrectly.  Check that
> > > > CONFIG_KLIPS_OCF is enabled in the kernel build.
> > > >
> > > > Run "cryptotest" and check the throughput.  If everything look
> > > > accelerated,  then you need to work out what is wrong with your
> > openswan
> > > > build/compile that is not enabled OCF support.
> > > >
> > > > Cheers,
> > > > Davidm
> > > >
> > > > --
> > > > David McCullough,  dav...@se...,   Ph:+61
> > > > 734352815
> > > > Secure Computing - SnapGear  http://www.uCdot.org
> > > > http://www.cyberguard.com
> > > >
> >
> > --
> > David McCullough,  dav...@se...,   Ph:+61
> > 734352815
> > Secure Computing - SnapGear  http://www.uCdot.org
> > http://www.cyberguard.com
> >



-- 
David McCullough,  dav...@se...,   Ph:+61 734352815
Secure Computing - SnapGear  http://www.uCdot.org http://www.cyberguard.com