<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2013-03-26 19:34, <a class="moz-txt-link-abbreviated" href="mailto:mkanet@yahoo.com">mkanet@yahoo.com</a>
wrote:<br>
</div>
<blockquote
cite="mid:1364322895.49238.YahooMailNeo@web181004.mail.ne1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff; font-family:arial,
helvetica, sans-serif;font-size:10pt">Wouldn't it be nice to
accelerate Stunnel SSL with sslshader? I'm not sure if
sslshader will have opensource/multiplatform support. But, the
idea sure sounds neat.<br>
<br>
<a class="moz-txt-link-freetext" href="http://shader.kaist.edu/sslshader/">http://shader.kaist.edu/sslshader/</a><br>
</div>
</blockquote>
<br>
I found this project back in 2011. It sounds interesting indeed.
It would be nice to implement an OpenSSL engine front-end to their
libgpucrypto, so it could be used with stunnel.<br>
<br>
Offloading AES or SHA1 is not very practical, as software
implementations can already handle over 1Tbps on modern CPUs. I bet
stunnel deployments that need to handle over 1Tbps traffic are not
very common.<br>
<br>
RSA acceleration on the other hand sounds interesting. Although
over 10ms GPU latency sounds bad compared to ~2ms CPU latency, the
bulk processing throughput of ~20 CPU cores could be useful.<br>
On the other hand I'm not sure if this is the most cost-effective
solution. It may be cheaper to buy 3 6-core or 8-core CPUs instead.<br>
<br>
For comparison stunnel benchmark on a 6-year-old machine:
<a class="moz-txt-link-freetext" href="https://www.stunnel.org/perf.html">https://www.stunnel.org/perf.html</a><br>
<br>
Mike<br>
</body>
</html>