OpenVPN bridging with only one interface?

[Bill McGonigle]

On Feb 9, 2006, at 11:10, Ben Scott wrote:

>   Unfortunately, that's not really much help.  First of all, clock
> rates are a really poor way to compare CPUs of different
> architectures.

If you have straight integer code (Rijndael is all table lookups, 
shifts, and XOR's) and the CPU's are of similar architectures 
(scalar-type, bits, dispatch types), in the same price category 
(affects caches and such) typically clock speed is proportional to 
performance, well within an order of magnitude, despite the flavor of 
instructions.  In the case of MIPS32 (WRT54G) and StrongARM (Sonicwall) 
Rijndael runs in 730 and 690 clocks respectively, so pretty close.  Of 
course, a Cell processor will do it in under a hundred, so it's all a 
matter of context.

> More importantly, a lot of VPN appliances use ASICs
> that off-load the crypto from the CPU.  The WRT54G has no such
> accelerator.  So you're comparing apples to orange juice.  :)

You're right - the Sonicwall does have a VPN ASIC to offload VPN 
processing, so it's at least apples to Sunny Delight, maybe 
artificially-flavored orange Pez.

-Bill
-----
Bill McGonigle, Owner           Work: 603.448.4440
BFC Computing, LLC              Home: 603.448.1668
bill at bfccomputing.com           Cell: 603.252.2606
http://www.bfccomputing.com/    Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2414 bytes
Desc: not available
Url : http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20060209/3fe75159/smime.bin