luwenpeng
commented
4 years ago During QAT configure, I set --enable-qat_small_pkt_offload. I also set ssl_ciphers 'AES128-SHA: AES256-SHA' in nginx.conf. qat_debug_log still cannot see the symmetric encryption information.
./configure \
--with-qat_dir=/QAT \
--with-openssl_dir=/openssl \
--with-openssl_install_dir=/usr/local/ssl \
--enable-upstream_driver \
--enable-usdm \
--enable-qat_rsa \
--enable-qat_dsa \
--enable-qat_dh \
--enable-qat_ecdh \
--enable-qat_ecdsa \
--enable-qat_ciphers \
--enable-qat_prf \
--enable-qat_small_pkt_offload \
--enable-qat_debug \
--with-qat_debug_file=/home/lwp/qat_debug_logcat nginx.conf
worker_processes 2;
error_log logs/error.log debug;
load_module modules/ngx_ssl_engine_qat_module.so;
events {
}
# Enable QAT engine in heretic mode.
ssl_engine {
use_engine qat;
default_algorithms ALL;
qat_engine {
qat_offload_mode async;
qat_notify_mode poll;
qat_poll_mode heuristic;
}
}
http {
gzip off;
server {
listen 80;
server_name localhost;
location / {
root html;
index index.html index.htm;
}
}
# HTTPS server with async mode.
server {
#If QAT Engine enabled, `asynch` need to add to `listen` directive or just add `ssl_asynch on;` to the context.
listen 443 ssl asynch;
server_name www.test.com;
ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers AES128-SHA:AES256-SHA;
ssl_certificate testg.com-cer.cer;
ssl_certificate_key test.com-key.pem;
location / {
root html;
index index.html index.htm;
}
}
}
paulturx
I added the debug log in asynch_mode_nginx and found that SSL_read () / SSL_write () never returned SSL_ERROR_WANT_ASYNC.
In order to determine whether SSL_read / SSL_write was actually offloaded to QAT, I performed the following verification：
1.
watch -d cat /sys/kernel/debug/qat_c6xx_0000\:1a\:00.0/fw_countersonly has the number of bytes when SSL_do_handshrk, and there is no number of bytes when SSL_read / SSL_wirte.Will SSL_read () / SSL_write () return SSL_ERROR_WANT_ASYNC, or will the code that handles SSL_read () / SSL_write () return SSL_ERROR_WANT_ASYNC never run?