[Bacula-users] cryptographic hardware accelerator offload

Has anyone tried one?  Any noticeable performance improvements for
AES-256 operations?

I guess the bigger question is whether Bacula will call in methods of
OpenSSL engine(3).

E.g., Apache mod_ssl needs to have an Engine type explicitly defined in
the config:

See:
   http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcryptodevice

Also see:

   ssl_engine_config.c in httpd-2.2.11/modules/ssl in Apache

We don't appear to be calling engine(3) API at all:

  ..work/bacula-2.4.4$ grep -ir engine src/lib/*{crypt,ssl}*
  ..work/bacula-2.4.4$

I'm assuming that each OpenSSL linked userland application must
explicitly define engine(3) calls to take advantage of HW Crypto
Accel/Offload then (compared to kernel services such as geom(4)/geli(8)
and ipsec(4) on FreeBSD can rely on the kernel OpenCrypto(9)
transparently) ?

-- 
Brian A. Seklecki <bseklecki AT collaborativefusion DOT com>
Collaborative Fusion, Inc.

signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com

_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users