diff options
author | Christian Poessinger <christian@poessinger.com> | 2020-05-30 19:35:13 +0200 |
---|---|---|
committer | Christian Poessinger <christian@poessinger.com> | 2020-05-30 19:35:13 +0200 |
commit | be5b71edd77b3a4507645f6787b63353560d3fbe (patch) | |
tree | 79871e36e2a48ba48bab77db80f8d13cedc80e92 /data | |
parent | 51dc3817dbca920714c53b04569a08613ae849aa (diff) | |
download | vyos-build-be5b71edd77b3a4507645f6787b63353560d3fbe.tar.gz vyos-build-be5b71edd77b3a4507645f6787b63353560d3fbe.zip |
QAT: import device configuration files
Diffstat (limited to 'data')
13 files changed, 348 insertions, 0 deletions
diff --git a/data/live-build-config/includes.chroot/etc/c3xxx_dev0.conf b/data/live-build-config/includes.chroot/etc/c3xxx_dev0.conf new file mode 100755 index 00000000..5e133fa9 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/c3xxx_dev0.conf @@ -0,0 +1,92 @@ +# INTEL® C62X CHIPSET, INTEL® ATOM™ C3000 PROCESSOR PRODUCT FAMILY, INTEL® XEON® PROCESSOR D FAMILY, INTEL® COMMUNICATION CHIPSET 8925 TO 8955 SERIES +# VyOS config + +[GENERAL] +ConfigVersion = 2 +# Enable only cryptographic service +ServicesEnabled = cy +# The number of cryptographic concurrent symmetric and asymmetric requests for cryptographic instances +CyNumConcurrentSymRequests = 512 +CyNumConcurrentAsymRequests = 16384 +# Automatically resets the device in case of fatal error or heartbeat failure +AutoResetOnError = 1 +# Interrupts Coalescing +InterruptCoalescingEnabled = 1 +# Wait for amount of ns before generate interrupt with cryptographic operation answer. Allows to combine multiple operations in a single interrupt +InterruptCoalescingTimerNs = 500000 + + +[KERNEL] +# Create two cryptographic instances +NumberCyInstances = 16 +NumberDcInstances = 0 +# Instance 0 +Cy0Name = "IPSec0" +Cy0IsPolled = 0 +Cy0CoreAffinity = 0 +# Instance 1 +Cy1Name = "IPSec1" +Cy1IsPolled = 0 +Cy1CoreAffinity = 1 +# Instance 2 +Cy2Name = "IPSec2" +Cy2IsPolled = 0 +Cy2CoreAffinity = 2 +# Instance 3 +Cy3Name = "IPSec3" +Cy3IsPolled = 0 +Cy3CoreAffinity = 3 +# Instance 4 +Cy4Name = "IPSec4" +Cy4IsPolled = 0 +Cy4CoreAffinity = 4 +# Instance 5 +Cy5Name = "IPSec5" +Cy5IsPolled = 0 +Cy5CoreAffinity = 5 +# Instance 6 +Cy6Name = "IPSec6" +Cy6IsPolled = 0 +Cy6CoreAffinity = 6 +# Instance 7 +Cy7Name = "IPSec7" +Cy7IsPolled = 0 +Cy7CoreAffinity = 7 +# Instance 8 +Cy8Name = "IPSec8" +Cy8IsPolled = 0 +Cy8CoreAffinity = 8 +# Instance 9 +Cy9Name = "IPSec9" +Cy9IsPolled = 0 +Cy9CoreAffinity = 9 +# Instance 10 +Cy10Name = "IPSec10" +Cy10IsPolled = 0 +Cy10CoreAffinity = 10 +# Instance 11 +Cy11Name = "IPSec11" +Cy11IsPolled = 0 +Cy11CoreAffinity = 11 +# Instance 12 +Cy12Name = "IPSec12" +Cy12IsPolled = 0 +Cy12CoreAffinity = 12 +# Instance 13 +Cy13Name = "IPSec13" +Cy13IsPolled = 0 +Cy13CoreAffinity = 13 +# Instance 14 +Cy14Name = "IPSec14" +Cy14IsPolled = 0 +Cy14CoreAffinity = 14 +# Instance 15 +Cy15Name = "IPSec15" +Cy15IsPolled = 0 +Cy15CoreAffinity = 15 + + +# Disable QAT API +[KERNEL_QAT] +NumberCyInstances = 0 +NumberDcInstances = 0 diff --git a/data/live-build-config/includes.chroot/etc/c3xxx_dev1.conf b/data/live-build-config/includes.chroot/etc/c3xxx_dev1.conf new file mode 120000 index 00000000..fd2a5189 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/c3xxx_dev1.conf @@ -0,0 +1 @@ +c3xxx_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/c3xxx_dev2.conf b/data/live-build-config/includes.chroot/etc/c3xxx_dev2.conf new file mode 120000 index 00000000..fd2a5189 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/c3xxx_dev2.conf @@ -0,0 +1 @@ +c3xxx_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/c6xx_dev0.conf b/data/live-build-config/includes.chroot/etc/c6xx_dev0.conf new file mode 100755 index 00000000..5e133fa9 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/c6xx_dev0.conf @@ -0,0 +1,92 @@ +# INTEL® C62X CHIPSET, INTEL® ATOM™ C3000 PROCESSOR PRODUCT FAMILY, INTEL® XEON® PROCESSOR D FAMILY, INTEL® COMMUNICATION CHIPSET 8925 TO 8955 SERIES +# VyOS config + +[GENERAL] +ConfigVersion = 2 +# Enable only cryptographic service +ServicesEnabled = cy +# The number of cryptographic concurrent symmetric and asymmetric requests for cryptographic instances +CyNumConcurrentSymRequests = 512 +CyNumConcurrentAsymRequests = 16384 +# Automatically resets the device in case of fatal error or heartbeat failure +AutoResetOnError = 1 +# Interrupts Coalescing +InterruptCoalescingEnabled = 1 +# Wait for amount of ns before generate interrupt with cryptographic operation answer. Allows to combine multiple operations in a single interrupt +InterruptCoalescingTimerNs = 500000 + + +[KERNEL] +# Create two cryptographic instances +NumberCyInstances = 16 +NumberDcInstances = 0 +# Instance 0 +Cy0Name = "IPSec0" +Cy0IsPolled = 0 +Cy0CoreAffinity = 0 +# Instance 1 +Cy1Name = "IPSec1" +Cy1IsPolled = 0 +Cy1CoreAffinity = 1 +# Instance 2 +Cy2Name = "IPSec2" +Cy2IsPolled = 0 +Cy2CoreAffinity = 2 +# Instance 3 +Cy3Name = "IPSec3" +Cy3IsPolled = 0 +Cy3CoreAffinity = 3 +# Instance 4 +Cy4Name = "IPSec4" +Cy4IsPolled = 0 +Cy4CoreAffinity = 4 +# Instance 5 +Cy5Name = "IPSec5" +Cy5IsPolled = 0 +Cy5CoreAffinity = 5 +# Instance 6 +Cy6Name = "IPSec6" +Cy6IsPolled = 0 +Cy6CoreAffinity = 6 +# Instance 7 +Cy7Name = "IPSec7" +Cy7IsPolled = 0 +Cy7CoreAffinity = 7 +# Instance 8 +Cy8Name = "IPSec8" +Cy8IsPolled = 0 +Cy8CoreAffinity = 8 +# Instance 9 +Cy9Name = "IPSec9" +Cy9IsPolled = 0 +Cy9CoreAffinity = 9 +# Instance 10 +Cy10Name = "IPSec10" +Cy10IsPolled = 0 +Cy10CoreAffinity = 10 +# Instance 11 +Cy11Name = "IPSec11" +Cy11IsPolled = 0 +Cy11CoreAffinity = 11 +# Instance 12 +Cy12Name = "IPSec12" +Cy12IsPolled = 0 +Cy12CoreAffinity = 12 +# Instance 13 +Cy13Name = "IPSec13" +Cy13IsPolled = 0 +Cy13CoreAffinity = 13 +# Instance 14 +Cy14Name = "IPSec14" +Cy14IsPolled = 0 +Cy14CoreAffinity = 14 +# Instance 15 +Cy15Name = "IPSec15" +Cy15IsPolled = 0 +Cy15CoreAffinity = 15 + + +# Disable QAT API +[KERNEL_QAT] +NumberCyInstances = 0 +NumberDcInstances = 0 diff --git a/data/live-build-config/includes.chroot/etc/c6xx_dev1.conf b/data/live-build-config/includes.chroot/etc/c6xx_dev1.conf new file mode 120000 index 00000000..23e40942 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/c6xx_dev1.conf @@ -0,0 +1 @@ +c6xx_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/c6xx_dev2.conf b/data/live-build-config/includes.chroot/etc/c6xx_dev2.conf new file mode 120000 index 00000000..23e40942 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/c6xx_dev2.conf @@ -0,0 +1 @@ +c6xx_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/d15xx_dev0.conf b/data/live-build-config/includes.chroot/etc/d15xx_dev0.conf new file mode 100755 index 00000000..5e133fa9 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/d15xx_dev0.conf @@ -0,0 +1,92 @@ +# INTEL® C62X CHIPSET, INTEL® ATOM™ C3000 PROCESSOR PRODUCT FAMILY, INTEL® XEON® PROCESSOR D FAMILY, INTEL® COMMUNICATION CHIPSET 8925 TO 8955 SERIES +# VyOS config + +[GENERAL] +ConfigVersion = 2 +# Enable only cryptographic service +ServicesEnabled = cy +# The number of cryptographic concurrent symmetric and asymmetric requests for cryptographic instances +CyNumConcurrentSymRequests = 512 +CyNumConcurrentAsymRequests = 16384 +# Automatically resets the device in case of fatal error or heartbeat failure +AutoResetOnError = 1 +# Interrupts Coalescing +InterruptCoalescingEnabled = 1 +# Wait for amount of ns before generate interrupt with cryptographic operation answer. Allows to combine multiple operations in a single interrupt +InterruptCoalescingTimerNs = 500000 + + +[KERNEL] +# Create two cryptographic instances +NumberCyInstances = 16 +NumberDcInstances = 0 +# Instance 0 +Cy0Name = "IPSec0" +Cy0IsPolled = 0 +Cy0CoreAffinity = 0 +# Instance 1 +Cy1Name = "IPSec1" +Cy1IsPolled = 0 +Cy1CoreAffinity = 1 +# Instance 2 +Cy2Name = "IPSec2" +Cy2IsPolled = 0 +Cy2CoreAffinity = 2 +# Instance 3 +Cy3Name = "IPSec3" +Cy3IsPolled = 0 +Cy3CoreAffinity = 3 +# Instance 4 +Cy4Name = "IPSec4" +Cy4IsPolled = 0 +Cy4CoreAffinity = 4 +# Instance 5 +Cy5Name = "IPSec5" +Cy5IsPolled = 0 +Cy5CoreAffinity = 5 +# Instance 6 +Cy6Name = "IPSec6" +Cy6IsPolled = 0 +Cy6CoreAffinity = 6 +# Instance 7 +Cy7Name = "IPSec7" +Cy7IsPolled = 0 +Cy7CoreAffinity = 7 +# Instance 8 +Cy8Name = "IPSec8" +Cy8IsPolled = 0 +Cy8CoreAffinity = 8 +# Instance 9 +Cy9Name = "IPSec9" +Cy9IsPolled = 0 +Cy9CoreAffinity = 9 +# Instance 10 +Cy10Name = "IPSec10" +Cy10IsPolled = 0 +Cy10CoreAffinity = 10 +# Instance 11 +Cy11Name = "IPSec11" +Cy11IsPolled = 0 +Cy11CoreAffinity = 11 +# Instance 12 +Cy12Name = "IPSec12" +Cy12IsPolled = 0 +Cy12CoreAffinity = 12 +# Instance 13 +Cy13Name = "IPSec13" +Cy13IsPolled = 0 +Cy13CoreAffinity = 13 +# Instance 14 +Cy14Name = "IPSec14" +Cy14IsPolled = 0 +Cy14CoreAffinity = 14 +# Instance 15 +Cy15Name = "IPSec15" +Cy15IsPolled = 0 +Cy15CoreAffinity = 15 + + +# Disable QAT API +[KERNEL_QAT] +NumberCyInstances = 0 +NumberDcInstances = 0 diff --git a/data/live-build-config/includes.chroot/etc/d15xx_dev1.conf b/data/live-build-config/includes.chroot/etc/d15xx_dev1.conf new file mode 120000 index 00000000..d35e91b1 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/d15xx_dev1.conf @@ -0,0 +1 @@ +d15xx_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/d15xx_dev2.conf b/data/live-build-config/includes.chroot/etc/d15xx_dev2.conf new file mode 120000 index 00000000..d35e91b1 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/d15xx_dev2.conf @@ -0,0 +1 @@ +d15xx_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/dh895xcc_dev0.conf b/data/live-build-config/includes.chroot/etc/dh895xcc_dev0.conf new file mode 100755 index 00000000..2f0eead7 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/dh895xcc_dev0.conf @@ -0,0 +1,59 @@ +# Intel® Communications Chipset 8900 to 8920 and Intel® Atom™ Processor C2000 Product Family for Communications Infrastructure +# Vyos config + +[GENERAL] +ConfigVersion = 2 +# Enable only cryptographic service +ServicesEnabled = cy +# The number of cryptographic concurrent symmetric and asymmetric requests for cryptographic instances +CyNumConcurrentSymRequests = 512 +CyNumConcurrentAsymRequests = 4096 +# Interrupt Coalescing, available only in Intel® Communications Chipset 8900 to 8920 and Intel® Atom™ Processor C2000 Product Family for Communications Infrastructure +InterruptCoalescingEnabled = 1 +# Wait for amount of ns before generate interrupt with cryptographic operation answer. Allows to combine multiple operations in a single interrupt +InterruptCoalescingTimerNs = 500000 +# Automatically resets the device in case of fatal error or heartbeat failure +AutoResetOnError = 1 + +[KERNEL] +# create two cryptographic instances +NumberCyInstances = 8 +NumberDcInstances = 0 +# Instance 0 +Cy0Name = "IPSec0" +Cy0IsPolled = 0 +Cy0CoreAffinity = 0 +# Instance 1 +Cy1Name = "IPSec1" +Cy1IsPolled = 0 +Cy1CoreAffinity = 1 +# Instance 2 +Cy2Name = "IPSec2" +Cy2IsPolled = 0 +Cy2CoreAffinity = 2 +# Instance 3 +Cy3Name = "IPSec3" +Cy3IsPolled = 0 +Cy3CoreAffinity = 3 +# Instance 4 +Cy4Name = "IPSec4" +Cy4IsPolled = 0 +Cy4CoreAffinity = 4 +# Instance 5 +Cy5Name = "IPSec5" +Cy5IsPolled = 0 +Cy5CoreAffinity = 5 +# Instance 6 +Cy6Name = "IPSec6" +Cy6IsPolled = 0 +Cy6CoreAffinity = 6 +# Instance 7 +Cy7Name = "IPSec7" +Cy7IsPolled = 0 +Cy7CoreAffinity = 7 + + +# Disable QAT API +[KERNEL_QAT] +NumberCyInstances = 0 +NumberDcInstances = 0 diff --git a/data/live-build-config/includes.chroot/etc/dh895xcc_dev1.conf b/data/live-build-config/includes.chroot/etc/dh895xcc_dev1.conf new file mode 120000 index 00000000..149fe872 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/dh895xcc_dev1.conf @@ -0,0 +1 @@ +dh895xcc_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/dh895xcc_dev2.conf b/data/live-build-config/includes.chroot/etc/dh895xcc_dev2.conf new file mode 120000 index 00000000..149fe872 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/dh895xcc_dev2.conf @@ -0,0 +1 @@ +dh895xcc_dev0.conf
\ No newline at end of file diff --git a/data/live-build-config/includes.chroot/etc/modprobe.d/intel-qat-blacklist.conf b/data/live-build-config/includes.chroot/etc/modprobe.d/intel-qat-blacklist.conf new file mode 100644 index 00000000..c0177a36 --- /dev/null +++ b/data/live-build-config/includes.chroot/etc/modprobe.d/intel-qat-blacklist.conf @@ -0,0 +1,5 @@ +blacklist intel_qat +blacklist qat_c3xxx +blacklist c6xx_dev0 +blacklist d15xx_dev0 +blacklist dh895xcc_dev0 |