From b5f367e75a50c70a18dcc246b80a08e3167c37b6 Mon Sep 17 00:00:00 2001 From: Rohit Yadav Date: Tue, 12 Mar 2013 16:34:50 +0530 Subject: [PATCH] CLOUDSTACK-1643: Check and enable Intel AES NI if available for VR This is an encryption optimization for VPN/SSL, with upto 10x advertised speed. The patch check for the aesni_intel module if aes is available on the cpu, this will be true for HVMs. Signed-off-by: Rohit Yadav --- .../debian/config/etc/init.d/cloud-early-config | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/patches/systemvm/debian/config/etc/init.d/cloud-early-config b/patches/systemvm/debian/config/etc/init.d/cloud-early-config index 877ab06009d..408264b478a 100755 --- a/patches/systemvm/debian/config/etc/init.d/cloud-early-config +++ b/patches/systemvm/debian/config/etc/init.d/cloud-early-config @@ -593,9 +593,20 @@ setup_redundant_router() { fi } +setup_aesni() { + if [ `grep aes /proc/cpuinfo | wc -l` -gt 0 ] + then + modprobe aesni_intel + if [ `lsmod | grep aesni_intel | wc -l` -gt 0 ] + then + echo aesni_intel >> /etc/modules + fi + fi +} + setup_router() { log_it "Setting up virtual router system vm" - + oldmd5= [ -f "/etc/udev/rules.d/70-persistent-net.rules" ] && oldmd5=$(md5sum "/etc/udev/rules.d/70-persistent-net.rules" | awk '{print $1}') @@ -643,10 +654,8 @@ setup_router() { fi fi - - + setup_aesni setup_dnsmasq - setup_apache2 $ETH0_IP sed -i /gateway/d /etc/hosts