Re: [tor-relays] Single IP multiple OR Ports

Hi Moritz,

i know that link and thats what i have done to setup intel aesni acceleration - but it seems that this tweak is not available anymore on ubuntu 13.10 thats what i've meant.
i found also some hints in google that this is no longer working now.

this is in my startup log:
Mar 04 11:54:24.000 [warn] Unable to load dynamic OpenSSL engine "aesni".
Mar 04 11:54:24.000 [notice] Default OpenSSL engine for RSA is RSAX engine support [rsax]
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: could not load the shared library (in DSO support routines:DLFCN_LOAD:---)
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: could not load the shared library (in DSO support routines:DSO_load:---)
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: dso not found (in engine routines:DYNAMIC_LOAD:---)
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: no such engine (in engine routines:ENGINE_by_id:---)

but as you can see aesni_intel is activated:
lsmod | grep aes
aesni_intel            55624 0
aes_x86_64             17131 1 aesni_intel
lrw                    13286 1 aesni_intel
glue_helper            13990 1 aesni_intel
ablk_helper            13597 1 aesni_intel
cryptd                 20359 3 ghash_clmulni_intel,aesni_intel,ablk_helper

i found some information on 2 pages that aesni_intel is no longer available to openssl 1.0.1 so this accelleration is not usable anymore - as ubuntu 13.10 is delivered with that openssl version im also affected of that change.

i found some informations here:
https://trac.torproject.org/projects/tor/ticket/6158
with a hint for reading here
https://lists.torproject.org/pipermail/tor-relays/2012-March/001260.html

is there any other way to get this acceleration working?

thanks for your support!

2014-03-04 9:10 GMT+01:00 Moritz Bartl <moritz@xxxxxxxxxxxxxx>:

Hi,

On 03/04/2014 08:19 AM, toxi roxi wrote:
> With an upgrade to ubuntu 13.10 x64 there seem to be no more support for
> aesni module - so it doesnt seem to be usable any more. With older
> ubuntu releases it works.

https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration

Does this help already?

> I've recognized that some configurations are running easily with an
> higher throughput - but could not figure out whats the reason for it.
> My VPS'es are almost running in an KVM environment - but the 2 fastest
> ones running on OpenVZ hypervisor.

I tried KVM and OpenVZ some years ago for high bandwidth relays, and
couldn't get it to make decent throughput at all. I now run all our fast
relays "on bare metal".

> But anyway im interested on reactivating that function as it seems to
> really speedup relay's speed.

Unless you max out /all/ your CPU cores, you can and should simply spin
up more Tor processes in parallel, one per CPU core, and limit their
bandwidth so they never hit 100% CPU usage.

--
Moritz Bartl
https://www.torservers.net/
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays