Forum Discussion

Magnum_IP's avatar
Magnum_IP
Icon for Nimbostratus rankNimbostratus
Jun 05, 2015

iRule CRYPTO commands

Do iRule CRYPTO commands get executed in hardware or software?

 

Obviously in the case of VE's I'd imagine the answer to be software but in the case of physical BIG-IPs is hardware used?

 

Notorious

 

application delivery
devops
iRules
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Jun 05, 2015

    all the CRYPTO commands are software only, there is no hardware acceleration.

     

  • Chris_FP's avatar
    Chris_FP
    Icon for Cirrus rankCirrus
    Jun 06, 2015

    Jason - Any roadmap for making CRYPTO commands use the hardware acceleration card instead. Seems strange not to make use of the card if it is availble.

     

  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jun 08, 2015

    Hi Chris,

     

    "AES::key" and "CRYPTO::keygen -alg random" both get their random data from hardware cryptographic random number generators if the hardware is present.

     

    You could open a case with F5 Support to request an enhancement (RFE) to support hardware acceleration for the bulk encryption too. I did a quick search for an existing RFE ID, but couldn't find one.

     

    Please reference C1128368-1 and C1037034.

     

    Thanks, Aaron