[tor-relays] Single IP multiple OR Ports

[toxi roxi]

Hi Moritz,

i know that link and thats what i have done to setup intel aesni
acceleration - but it seems that this tweak is not available anymore on
ubuntu 13.10 thats what i've meant.
i found also some hints in google that this is no longer working now.

this is in my startup log:
Mar 04 11:54:24.000 [warn] Unable to load dynamic OpenSSL engine "aesni".
Mar 04 11:54:24.000 [notice] Default OpenSSL engine for RSA is RSAX engine
support [rsax]
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: could
not load the shared library (in DSO support routines:DLFCN_LOAD:---)
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: could
not load the shared library (in DSO support routines:DSO_load:---)
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: dso not
found (in engine routines:DYNAMIC_LOAD:---)
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: no such
engine (in engine routines:ENGINE_by_id:---)


but as you can see aesni_intel is activated:
lsmod | grep aes
aesni_intel            55624  0
aes_x86_64             17131  1 aesni_intel
lrw                    13286  1 aesni_intel
glue_helper            13990  1 aesni_intel
ablk_helper            13597  1 aesni_intel
cryptd                 20359  3 ghash_clmulni_intel,aesni_intel,ablk_helper


i found some information on 2 pages that aesni_intel is no longer available
to openssl 1.0.1 so this accelleration is not usable anymore - as ubuntu
13.10 is delivered with that openssl version im also affected of that
change.

i found some informations here:
https://trac.torproject.org/projects/tor/ticket/6158
with a hint for reading here
https://lists.torproject.org/pipermail/tor-relays/2012-March/001260.html

is there any other way to get this acceleration working?

thanks for your support!



2014-03-04 9:10 GMT+01:00 Moritz Bartl <moritz at torservers.net>:

> Hi,
>
> On 03/04/2014 08:19 AM, toxi roxi wrote:
> > With an upgrade to ubuntu 13.10 x64 there seem to be no more support for
> > aesni module - so it doesnt seem to be usable any more. With older
> > ubuntu releases it works.
>
> https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration
>
> Does this help already?
>
> > I've recognized that some configurations are running easily with an
> > higher throughput - but could not figure out whats the reason for it.
> > My VPS'es are almost running in an KVM environment - but the 2 fastest
> > ones running on OpenVZ hypervisor.
>
> I tried KVM and OpenVZ some years ago for high bandwidth relays, and
> couldn't get it to make decent throughput at all. I now run all our fast
> relays "on bare metal".
>
> > But anyway im interested on reactivating that function as it seems to
> > really speedup relay's speed.
>
> Unless you max out /all/ your CPU cores, you can and should simply spin
> up more Tor processes in parallel, one per CPU core, and limit their
> bandwidth so they never hit 100% CPU usage.
>
> --
> Moritz Bartl
> https://www.torservers.net/
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20140304/0b9998ce/attachment.html>