Hello All, Has anyone ever looked at enabling hardware acceleration of SIP+TLS (and more importantly) SRTP? Hardware engines are pretty well defined in OpenSSL at this point so it shouldn't be too hard to get Sofia to use them. SRTP, on the other hand, doesn't use OpenSSL... So the next question is: How hard would it be to get libsrtp to use OpenSSL AES so we could take advantage of the various hardware engines available? Would it actually help? Has anyone looked at this? Thanks! -- Kristian Kielhofner
Yes actually. pressureman in IRC was saying he's working on that. If he's successful we'll surely be pushing that into tree, On Wed, Dec 12, 2012 at 10:07 AM, Kristian Kielhofner <kris@kriskinc.com>wrote:
Hello All,
Has anyone ever looked at enabling hardware acceleration of SIP+TLS (and more importantly) SRTP?
Hardware engines are pretty well defined in OpenSSL at this point so it shouldn't be too hard to get Sofia to use them. SRTP, on the other hand, doesn't use OpenSSL...
So the next question is: How hard would it be to get libsrtp to use OpenSSL AES so we could take advantage of the various hardware engines available? Would it actually help? Has anyone looked at this?
Thanks!
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
Nice! IRC... Does "pressureman" have a real name or e-mail address? On Wed, Dec 12, 2012 at 11:38 AM, Anthony Minessale <anthony.minessale@gmail.com> wrote:
Yes actually. pressureman in IRC was saying he's working on that. If he's successful we'll surely be pushing that into tree,
-- Kristian Kielhofner
Yah, I forgot what it was, I'll send him your way when I see him again. On Wed, Dec 12, 2012 at 11:31 AM, Kristian Kielhofner <kris@kriskinc.com>wrote:
Nice!
IRC... Does "pressureman" have a real name or e-mail address?
On Wed, Dec 12, 2012 at 11:38 AM, Anthony Minessale <anthony.minessale@gmail.com> wrote:
Yes actually. pressureman in IRC was saying he's working on that. If he's successful we'll surely be pushing that into tree,
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
On 12/12/2012 05:07 PM, Kristian Kielhofner wrote:
Hello All,
Has anyone ever looked at enabling hardware acceleration of SIP+TLS (and more importantly) SRTP?
There's support for AES in 2010 and later Intel cpu's. Maybe that could possibly be used for this acceleration? http://software.intel.com/en-us/articles/intel-advanced-encryption-standard-... An overview of cpu's with AES can be found here: http://ark.intel.com/search/advanced/?s=t&AESTech=true
Hardware engines are pretty well defined in OpenSSL at this point so it shouldn't be too hard to get Sofia to use them. SRTP, on the other hand, doesn't use OpenSSL...
Last time I looked the price of those hardware cards is considerable so it should really bump max SRTP calls to justify the CAPEX.
So the next question is: How hard would it be to get libsrtp to use OpenSSL AES so we could take advantage of the various hardware engines available? Would it actually help? Has anyone looked at this?
Apparently pressureman is.
Thanks!
Regards, Patrick
On Wed, Dec 12, 2012 at 11:08 PM, Patrick Lists <freeswitch-list@puzzled.xs4all.nl> wrote:
There's support for AES in 2010 and later Intel cpu's. Maybe that could possibly be used for this acceleration?
http://software.intel.com/en-us/articles/intel-advanced-encryption-standard-...
An overview of cpu's with AES can be found here: http://ark.intel.com/search/advanced/?s=t&AESTech=true
...and VIA Padlock, Geode AES, etc, etc.
Last time I looked the price of those hardware cards is considerable so it should really bump max SRTP calls to justify the CAPEX.
Hardware (even CPUs mentioned above) accelerated crypto is exposed in OpenSSL through engine. It doesn't have to be those expensive hardware cards... -- Kristian Kielhofner
participants (3)
-
Anthony Minessale
-
Kristian Kielhofner
-
Patrick Lists