Skip to content
Snippets Groups Projects
  • Stijn Tintel's avatar
    301301da
    x86/64: enable AES-NI support in kernel · 301301da
    Stijn Tintel authored
    
    The kernel will detect if the host supports this, so we can just enable
    it in the kernel config.
    
    Tested on an APU2 with AES-NI support and a KVM VM on a Xeon E5520 host
    without AES-NI support.
    
    Throughput over an IPsec tunnel between these 2 hosts increased from
    ~63Mbps to ~140Mbps. Ciphers: AES_GCM_16_256/PRF_HMAC_SHA2_512/ECP_521.
    
    Signed-off-by: default avatarStijn Tintel <stijn@linux-ipv6.be>
    301301da
    History
    x86/64: enable AES-NI support in kernel
    Stijn Tintel authored
    
    The kernel will detect if the host supports this, so we can just enable
    it in the kernel config.
    
    Tested on an APU2 with AES-NI support and a KVM VM on a Xeon E5520 host
    without AES-NI support.
    
    Throughput over an IPsec tunnel between these 2 hosts increased from
    ~63Mbps to ~140Mbps. Ciphers: AES_GCM_16_256/PRF_HMAC_SHA2_512/ECP_521.
    
    Signed-off-by: default avatarStijn Tintel <stijn@linux-ipv6.be>