Upload
michelle-holley
View
45
Download
2
Embed Size (px)
Citation preview
Intel® QuickAssist TechnologyJoel Auernheimer
Network Platforms Group 2
Intel® QuickAssist Technology Overview
QAT provides security (encryption) HW acceleration and compression HW acceleration
QAT makes use of a set of APIs to abstract out the hardware, so the same application can run on multiple generations of QAT hardware
Customers can also make use of patches that we have provided to popular open source software, so they can minimize or eliminate their effort to learn the API
Network Platforms Group 3
Intel® QuickAssist Technology Collaterals
Where to find the QAT software and collaterals:
01.org (https://01.org/intel-quickassist-technology)– Or just search the Internet for “01.org QuickAssist”
For unreleased products, consult your Intel® representative
Some in-kernel support is available
Network Platforms Group 4
Supported Hardware
Intel® Communications Chipset 89xx series (formerly known as Cave Creek and Coleto Creek) (PCH+QAT or QAT endpoint only), plus add-in cards
Intel® Atom™ Processor C2000 Product Family for Communications Infrastructure (SoC)
More information (including performance numbers) is available in the product briefs on ark.intel.com
Network Platforms Group 5
Getting Started with QAT
Download the QAT software for your platform
Following our Getting Started Guide to install the QAT software
Includes “qat_service”, kernel modules, library files, configuration files...
Includes performance sample code
Includes functional sample code
QAT video resources are available on Intel Developer Zone
Network Platforms Group 6
Offloading to QAT frees up CPU cores!
QAT endpoints show up as a PCIe Device
Exposes request/response ring interface
User application allocates memory and puts input data (including payload, keys...) in DRAM
QAT API is called
API handles DMA, etc
Poll or interrupt for result
Take advantage of QAT parallelism
Network Platforms Group 7
QAT Algorithms
Symmetric cryptography functions include: cipher operations (AES, DES, 3DES, ARC4); wireless (Kasumi, Snow 3G); hash/authenticate operations (SHA-1, MD5; SHA-2 [SHA-224, SHA-256, SHA-384, SHA-512]); authentication (HMAC, AES-XCBC, AES-CCM); AES-XTS (8925, 8950 and 8955 only); and random number generation
Public Key functions include: RSA operation; Diffie-Hellman operation; digital signature standard operation; key derivation operation; elliptic curve cryptography (ECDSA and ECDH); random number generation; and prime number testing.
Compression/decompression include: DEFLATE
Network Platforms Group 8
QAT Software Architecture (with examples)
Network Platforms Group 9
QAT Collaterals
Code:
QAT driver(s), NGINX patch, openssl patch, zlib patch
SW documentation:
Release Notes, Getting Started Guide, API Programmer's Guide, Cryptographic API Reference Manual, Data Compression API Reference Manual, Programmer's Guide (includes configuration file details), Performance Optimization Guide, Virtualization App Note
Network Platforms Group 10
QAT Video Resources
https://software.intel.com/en-us/videos/intel-quickassist-technology-software-package-installation
https://software.intel.com/en-us/videos/intel-quickassist-technology-performance-sample-code
https://software.intel.com/en-us/videos/intel-quickassist-technology-installation-debug
https://software.intel.com/en-us/videos/intel-quickassist-technology-performance-sample-code-debug
https://software.intel.com/en-us/videos/intel-quickassist-technology-programming-basics
Network Platforms Group 11
“Transforming the 5G Network Edge: More Power, Performance and Intelligence”https://newsroom.intel.com/editorials/transforming-5g-network-edge-more-power-performance-intelligence/
Available mid-year (2017):
Intel Atom® processor C3000 product family enables network edge device vendors to reach a wide range of cost-performance and power-performance points and integrates Intel® QuickAssist technology for up to 20 Gbps crypto and compression acceleration.
New Networking Series for the Intel® Xeon® processor D-1500 product family allows CoSPs to scale up performance beyond the Intel Atom processor C3000 product family while securing and compressing data at the network edge at rates up to 40 Gbps.
Next-generation Intel QuickAssist Adapter family can process even larger amounts of data coming from IoT and network edge devices, delivering up to 100 Gbps of crypto, compression and public key acceleration.
Network Platforms Group 12
Other topics
Synchronous vs asynchronous
SHA-1 “shattered”?
QAT Getting Started Guide walkthrough
QAT OS support
Programmer’s Guide content overview
Network Platforms Group 13
Knowledge Check and advanced topicsT/F: QAT is part of all CPUs?
Explain: QAT is a “black box”
Explain: QAT can operate in “endpoint-only mode”
Where is the QAT documentation?
What software works with QAT out of the box?
Where are the configuration files located? Why are configuration files needed?
Under what conditions might I see less than Intel’s best performance numbers for a particular product?
How do I upgrade QAT firmware?
How do I show that QAT is working on a particular platform?
What Linux kernels are supported?
Network Platforms Group
Backup
14
Network Platforms Group
Legal Disclaimers
Technology Disclaimer:
Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No computer system can be absolutely secure. Check with your system manufacturer or retailer or learn more at [intel.com].
General Disclaimer:
© Copyright 2015 Intel Corporation. All rights reserved. Intel, the Intel logo, Intel Inside, the Intel Inside logo, Intel. Experience What’s Inside are trademarks of Intel. Corporation in the U.S. and/or other countries. *Other names and brands may be claimed as the property of others.
15