<div dir="ltr"><div><div><div><div><div>Hi Moritz,<br><br>i know that link and thats what i have done to setup intel aesni acceleration - but it seems that this tweak is not available anymore on ubuntu 13.10 thats what i've meant.<br>
i found also some hints in google that this is no longer working now.<br><br></div>this is in my startup log:<br>Mar 04 11:54:24.000 [warn] Unable to load dynamic OpenSSL engine "aesni".<br>Mar 04 11:54:24.000 [notice] Default OpenSSL engine for RSA is RSAX engine support [rsax]<br>
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: could not load the shared library (in DSO support routines:DLFCN_LOAD:---)<br>Mar 04 11:54:24.000 [warn] TLS error while generating certificate: could not load the shared library (in DSO support routines:DSO_load:---)<br>
Mar 04 11:54:24.000 [warn] TLS error while generating certificate: dso not found (in engine routines:DYNAMIC_LOAD:---)<br>Mar 04 11:54:24.000 [warn] TLS error while generating certificate: no such engine (in engine routines:ENGINE_by_id:---)<br>
<br><br></div>but as you can see aesni_intel is activated:<br>lsmod | grep aes<br>aesni_intel 55624 0<br>aes_x86_64 17131 1 aesni_intel<br>lrw 13286 1 aesni_intel<br>glue_helper 13990 1 aesni_intel<br>
ablk_helper 13597 1 aesni_intel<br>cryptd 20359 3 ghash_clmulni_intel,aesni_intel,ablk_helper<br><br><br></div>i found some information on 2 pages that aesni_intel is no longer available to openssl 1.0.1 so this accelleration is not usable anymore - as ubuntu 13.10 is delivered with that openssl version im also affected of that change.<br>
<br></div>i found some informations here:<br><a href="https://trac.torproject.org/projects/tor/ticket/6158">https://trac.torproject.org/projects/tor/ticket/6158</a> <br>with a hint for reading here<br><a href="https://lists.torproject.org/pipermail/tor-relays/2012-March/001260.html">https://lists.torproject.org/pipermail/tor-relays/2012-March/001260.html</a><br>
<br></div><div>is there any other way to get this acceleration working?<br></div><div><br></div>thanks for your support!<br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-03-04 9:10 GMT+01:00 Moritz Bartl <span dir="ltr"><<a href="mailto:moritz@torservers.net" target="_blank">moritz@torservers.net</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<div class=""><br>
On 03/04/2014 08:19 AM, toxi roxi wrote:<br>
> With an upgrade to ubuntu 13.10 x64 there seem to be no more support for<br>
> aesni module - so it doesnt seem to be usable any more. With older<br>
> ubuntu releases it works.<br>
<br>
</div><a href="https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration" target="_blank">https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration</a><br>
<br>
Does this help already?<br>
<div class=""><br>
> I've recognized that some configurations are running easily with an<br>
> higher throughput - but could not figure out whats the reason for it.<br>
> My VPS'es are almost running in an KVM environment - but the 2 fastest<br>
> ones running on OpenVZ hypervisor.<br>
<br>
</div>I tried KVM and OpenVZ some years ago for high bandwidth relays, and<br>
couldn't get it to make decent throughput at all. I now run all our fast<br>
relays "on bare metal".<br>
<div class=""><br>
> But anyway im interested on reactivating that function as it seems to<br>
> really speedup relay's speed.<br>
<br>
</div>Unless you max out /all/ your CPU cores, you can and should simply spin<br>
up more Tor processes in parallel, one per CPU core, and limit their<br>
bandwidth so they never hit 100% CPU usage.<br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
Moritz Bartl<br>
<a href="https://www.torservers.net/" target="_blank">https://www.torservers.net/</a><br>
_______________________________________________<br>
tor-relays mailing list<br>
<a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br>
</div></div></blockquote></div><br></div>