AES-NI hardware support

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
tomk30
Posts: 1
Joined: Mon Apr 27, 2020 10:31 am

AES-NI hardware support

Post by tomk30 » Mon Apr 27, 2020 7:20 pm

My configuration : freebsd 11.3 , openssl-1.1.1f , softether-devel-4.34.9745.b . , i5-2500T
SE manager shows CPU AES-NI acceleration : no
Why SE no detect cpu AES-NI ?


Second question :
I would like restrict connected vpn client to not go beyond my gateway so try - Manage access List - discard destination IP ,but seems to not work.


Regards
Tmk

Snoopyandcharles
Posts: 12
Joined: Thu Apr 02, 2020 1:28 am

Re: AES-NI hardware support

Post by Snoopyandcharles » Wed Apr 29, 2020 5:21 pm

if using virtual nat. delete default gate way. and use static routes

ziddey
Posts: 17
Joined: Sat May 09, 2020 6:42 pm

Re: AES-NI hardware support

Post by ziddey » Sat May 09, 2020 6:43 pm

seeing the same here. /proc/cpuinfo shows aes flag but softether shows aes-ni active is no

drkrool
Posts: 93
Joined: Mon May 25, 2020 4:38 am
Location: Quebec, Canada

Re: AES-NI hardware support

Post by drkrool » Mon May 25, 2020 4:44 am

Are you in a VM or on physical machine?

I'm on physical fedora server and mine is shown as "yes"

ziddey
Posts: 17
Joined: Sat May 09, 2020 6:42 pm

Re: AES-NI hardware support

Post by ziddey » Mon May 25, 2020 4:50 am

drkrool wrote:
Mon May 25, 2020 4:44 am
Are you in a VM or on physical machine?

I'm on physical fedora server and mine is shown as "yes"
LXC. Switched to using softether5 and now it's showing "CPU AES Acceleration (AES-NI) is Active" as "Yes" :)

drkrool
Posts: 93
Joined: Mon May 25, 2020 4:38 am
Location: Quebec, Canada

Re: AES-NI hardware support

Post by drkrool » Mon May 25, 2020 5:01 am

ziddey wrote:
Mon May 25, 2020 4:50 am
drkrool wrote:
Mon May 25, 2020 4:44 am
Are you in a VM or on physical machine?

I'm on physical fedora server and mine is shown as "yes"
LXC. Switched to using softether5 and now it's showing "CPU AES Acceleration (AES-NI) is Active" as "Yes" :)
Great news. Just wondering, where do I find theses "beta" downloads please? Thanks!

ziddey
Posts: 17
Joined: Sat May 09, 2020 6:42 pm

Re: AES-NI hardware support

Post by ziddey » Mon May 25, 2020 5:13 am


drkrool
Posts: 93
Joined: Mon May 25, 2020 4:38 am
Location: Quebec, Canada

Re: AES-NI hardware support

Post by drkrool » Mon Jun 01, 2020 2:29 am

Just adding to this post that I have the same problem on my pfsense (FreeBSD), AES-NI is supported and activated but Softether says "no" to it's availability check

Haven't tried the softether 5 server on it yet

Post Reply