fastSwan: Nvidia ConnectX-7 by numbers
4 points by vbernat
4 points by vbernat
This is about IPsec offload to ConnectX-7. With one of the described setup, it is possible to achieve full offload (encryption, encapsulation, and routing).
Would it be possible to offload Wireguard instead, e.g. for Tailscale?
As per https://www.nvidia.com/content/dam/en-zz/Solutions/networking/ethernet-adapters/connectx-7-datasheet-Final.pdf. it doesn't seem like wireguard is implemented in hw. And afaik, WG on tailscale is wireguard-go, it doesn't use the kernel one.