pfSense » pfSense Plus

Hello Fellow Redmine Community Members,

I have recently learned with trail and error and help of Kristof Provost that selecting both IPsec-MB and Cryptographic Hardware results in the system using only one or the other.

For me this caused a decrease in speed that is substantial. I feel that the GUI should only allow the selection of one or the other at a time and now allow both.

As quoted from forum @kpovost,

"Either one will work. Things will even work if you have both activated, but then only one of them will do the work. We're not going to be splitting the cryptographic work between the two, or doing it twice just so both will get used."

Per Kristof Provost "JonathanLee I mean, you can't use both at the same time. The data's only ever going to be processed by one of them. I'd have to go dig deep in the code to tell you how the selection is made if both are enabled, but it looks like in this case it ends up using IIMB.

IIMB is fine, but probably not quite as fast as SafeXcel. You're getting crypto acceleration either way, just in a different way."

Can we please fix the GUI so only one can be selected at a time for use. This seemed to cause a speed issue with my equipment when both are enabled this would make the devices more efficient and free up some resources.