[tor-relays] HardwareAccel: Current proper use???

To: tor-talk@xxxxxxxxxxxxxxxxxxxx, tor-relays@xxxxxxxxxxxxxxxxxxxx

Subject: [tor-relays] HardwareAccel: Current proper use???

Date: Sat, 3 Jan 2015 10:39:49 +0100

Delivery-date: Sat, 03 Jan 2015 04:41:07 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:from:date:message-id:subject:to:content-type; bh=b1fEvVQ25pgJFxYh3nhOfNKQFVK802eQ562fcm7BVY4=; b=pxC6mDTK0DzqOltq9d1yzdFk2GdE2VSfBYUIefhJWfWaIaNNlXZ4utnMnjnic9awE5 8gXxl8YL8/BZgOfCxS4aKWm5F5v+s8abbqDee74R5sglIoTv4oZOkPWmoa9y2CQ1oQL0 pvsJCTrCUZK0NnDhW+VIPsDOub4c+YQGL38syhcmyJwUGitLU50EHiNecGcmRo7z+kMW yVXLp8lRjuK6N+XlBMlrckEja8U9G9H17akyg3UaPUHzQ+tZ9JOZ2R4CTMXjlxZ3lidg KyDgVvNO3Qzt0IHThBAQeaUTPeXnAJeaT6LQIuxDDISUD232Ed2I31McxuQqTLdbFe/H NdNg==

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Summary:

The documentation is still somewhat vague on the best use of the "HardwareAccel" option.

HardwareAccelÂ0|1
If non-zero, try to use built-in (static) crypto hardware acceleration when available. (Default: 0)

I could not find a definitive answer in the archives or inÂhttps://gitweb.torproject.org/tor.git/log/?qt=grep&q=hardwareaccel&showmsg=1.

https://www.torservers.net/wiki/setup/server#aes-ni_crypto_accelerationÂclaims no intervention is needed in regards of aes-ni accelaration, but I would like to add an explanation or source to this recommendation.

Question_1:

If my CPU supports and have loaded aesni_intel on linux with OpenSSL is 1.0.1.j-1, should I leave HardwareAccel off or explicitly enable it?

Question_2:

What does "built-in (static) crypto hardware acceleration" refer to? Dedicated hardware, CPU-support or...?

Best regards

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays