Joe Doran wrote:
> You will also have to consider that the VPN code will need to work with
> hardware accelerators like the one you can by from soekris.
> 
> http://www.soekris.com/

The VPN code should IMO use the /dev/crypto API ( man 9 crypto ) as much as
possible.  The HiFn chip used in the Soekris 1201/1211 is supported, though
not completely.  I believe the 7951 can do IKE calcs directly, and supports
key lengths for RSA and DH up to 2048 bits.