search

intel / qatlib

Other
95 stars 34 forks source link

Does KTLS support offloading crypto operation to QAT device? #68

Closed liverbirdkte closed 10 months ago

liverbirdkte commented 11 months ago

Hi guys, I'm looking at KTLS(https://docs.kernel.org/networking/tls-offload.html) which supports offloading crypto work to NICs. Is it possible to use QAT in this scenario, to let kernel offload crypto to QAT device? If so, do you have any performance benchmark? Thanks!

liverbirdkte commented 11 months ago

Hi @jdschuet @fionatrahe, it seems KTLS crypto can only be offloaded to NIC hardware, there's no way to use QAT to accelerate encryption and decryption of kernel TLS. Is my understanding right?

gcabiddu commented 11 months ago

Looking at the documentation and the code, it appears that kTLS can use accelerators through the Linux Crypto framework when running in Software crypto mode (TLS_SW).

liverbirdkte commented 10 months ago

@gcabiddu, yes, it should work to specify qat related cipher with KTLS, I'll try with this, thanks!

gcabiddu commented 10 months ago

Thanks @liverbirdkte. I'm going to close this as this ticket is not related to qatlib.