Running tor on OpenBSD with hardware acceleration
Hello, I have a relay running on OpenBSD. LibreSSL that comes with OpenBSD does not have support for hardware acceleration. I get this when I start tor: "[notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster." How do I enable support for hardware acceleration? My guess is that I have to compile and install OpenSSL, then compile Tor to use the new OpenSSL. Does anyone here have any experience with this on OpenBSD? Anything that I have missed and should be aware of? Thanks.
On Wed, Sep 14, 2016 at 08:12:15AM +0000, Farid Joubbi wrote:
Hello,
I have a relay running on OpenBSD.
LibreSSL that comes with OpenBSD does not have support for hardware acceleration.
I get this when I start tor:
"[notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster."
How do I enable support for hardware acceleration?
My guess is that I have to compile and install OpenSSL, then compile Tor to use the new OpenSSL.
Does anyone here have any experience with this on OpenBSD?
Anything that I have missed and should be aware of?
Thanks.
It's disabled because various compilers produce incorrect code for it and no one knows for sure which ones are safe to use. See also: https://marc.info/?l=openbsd-misc&m=142014109006432&w=2 -- Carlin
Thank you for the information! Now I know why. Do you happen to know if the people on the discussion you linked to came to a conclusion about why OpenBSD relays perform not as well as Linuxes? Reading the whole thread made me believe that there is probably another bottle neck there too. ________________________________________ From: tor-relays <tor-relays-bounces@lists.torproject.org> on behalf of Carlin Bingham <cb@viennan.net> Sent: 14 September 2016 12:51 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Running tor on OpenBSD with hardware acceleration On Wed, Sep 14, 2016 at 08:12:15AM +0000, Farid Joubbi wrote:
Hello,
I have a relay running on OpenBSD.
LibreSSL that comes with OpenBSD does not have support for hardware acceleration.
I get this when I start tor:
"[notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster."
How do I enable support for hardware acceleration?
My guess is that I have to compile and install OpenSSL, then compile Tor to use the new OpenSSL.
Does anyone here have any experience with this on OpenBSD?
Anything that I have missed and should be aware of?
Thanks.
It's disabled because various compilers produce incorrect code for it and no one knows for sure which ones are safe to use. See also: https://marc.info/?l=openbsd-misc&m=142014109006432&w=2 -- Carlin _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Thank you for the information! Now I know why.
Do you happen to know if the people on the discussion you linked to came to a conclusion about why OpenBSD relays perform not as well as Linuxes? Reading the whole thread made me believe that there is probably another bottle neck there too.
As far as I can recall no final conclusion has been made by Libertas, as to why OpenBSD performed/performs much worse on same HW when compared to i.e. Debian. I doubt that the bottleneck is caused by that missing enable-ec_nistp_64_gcc_128 option since FreeBSD hasn't it either https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200223 Also note that since that discussions a few new OpenBSD releases have been released.
participants (3)
-
Carlin Bingham -
Farid Joubbi -
nusenu