From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id E16D69263F for ; Wed, 29 Mar 2023 16:10:42 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id C51A33C6E7 for ; Wed, 29 Mar 2023 16:10:12 +0200 (CEST) Received: from picard.linux.it (picard.linux.it [IPv6:2001:1418:10:5::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS for ; Wed, 29 Mar 2023 16:10:08 +0200 (CEST) Received: by picard.linux.it (Postfix, from userid 10) id 5D9243CCAB2; Wed, 29 Mar 2023 16:10:08 +0200 (CEST) Received: from news by eraldo.lilliput.linux.it with local (Exim 4.89) (envelope-from ) id 1phWR8-0004NH-4X for pve-user@lists.proxmox.com; Wed, 29 Mar 2023 16:06:02 +0200 From: Marco Gaiarin Date: Wed, 29 Mar 2023 16:02:28 +0200 Organization: Il gaio usa sempre TIN per le liste, fallo anche tu!!! Message-ID: References: X-Trace: eraldo.lilliput.linux.it 1680098643 16375 192.168.24.2 (29 Mar 2023 14:04:03 GMT) To: Arjen via pve-user X-Mailer: tin/2.6.2-20220130 ("Convalmore") (Linux/5.15.0-69-generic (x86_64)) X-Gateway-System: SmartGate 1.4.5 Cc: pve-user@lists.proxmox.com In-Reply-To: ; from SmartGate on Wed, Mar 29, 2023 at 16:06:02PM +0200 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.226 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy JMQ_SPF_NEUTRAL 0.5 SPF set to ?all KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [PVE-User] Enable AES? X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Mar 2023 14:10:42 -0000 Mandi! Arjen via pve-user In chel di` si favelave... > Do you use the CPU type host, max or any other type that has aes already included? No, de default, kvm64. Where i can find info on different CPU type?! > If you use kvm64 for example, then you need to enable it in Advanced, Extra CPU Flags. OK. > Whether this actually works also depends on pfSense. If it detects a very old CPU type (like 486) then it might not bother to check the aes flag. /root: grep -i cpu /var/run/dmesg.boot CPU: Common KVM processor (2095.11-MHz K8-class CPU) FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs cpu0: on acpi0 CPU: Common KVM processor (2095.11-MHz K8-class CPU) /root: sysctl -a | egrep -i 'hw.machine|hw.model|hw.ncpu' hw.machine: amd64 hw.model: Common KVM processor hw.ncpu: 4 hw.machine_arch: amd64 I'll try to enable it and see... -- Vendere no, non passa tra i miei rischi, non comprate i miei dischi e sputatemi addosso. (F. Guccini)