search

intel / qatlib

Other
91 stars 34 forks source link

Does KTLS support offloading crypto operation to QAT device? #68

Closed liverbirdkte closed 8 months ago

liverbirdkte commented 9 months ago

Hi guys, I'm looking at KTLS(https://docs.kernel.org/networking/tls-offload.html) which supports offloading crypto work to NICs. Is it possible to use QAT in this scenario, to let kernel offload crypto to QAT device? If so, do you have any performance benchmark? Thanks!

liverbirdkte commented 9 months ago

Hi @jdschuet @fionatrahe, it seems KTLS crypto can only be offloaded to NIC hardware, there's no way to use QAT to accelerate encryption and decryption of kernel TLS. Is my understanding right?

gcabiddu commented 8 months ago

Looking at the documentation and the code, it appears that kTLS can use accelerators through the Linux Crypto framework when running in Software crypto mode (TLS_SW).

liverbirdkte commented 8 months ago

@gcabiddu, yes, it should work to specify qat related cipher with KTLS, I'll try with this, thanks!

gcabiddu commented 8 months ago

Thanks @liverbirdkte. I'm going to close this as this ticket is not related to qatlib.