QAT HARDWARE-ACCELERATED

Intel® QuickAssist Technology (Intel® QAT) enables acceleration for data encryption and compression for applications from networking to enterprise, cloud to storage, and content delivery to database. Below recipe contains instructions for a hardware-accelerated version.

QAT, #QuickAssistTechnology, #encryption, #compression

Software Components

Table 1 lists the necessary software components for this workload. The descending row order represents the install sequence. The recommended component version and download location are also provided.

Table 1: Software Components | Component | Version | | :--- | :----: | | Ubuntu OS | 22.04 | | git | 1:2.34.1-1ubuntu1.8 | | gcc | 4:11.2.0-1ubuntu1 | | g++ | 4:11.2.0-1ubuntu1 | | cmake | 3.22.1-1ubuntu1.22.04.1 | | make | 4.3-4.1build1 | | automake | 1:1.16.5-1.3 | | autoconf | 2.71-2 | | libtool | 2.4.6-15build2 | | nasm | 2.15.05-1 | | yasm | 1.3.0-2.1 | | perl | 5.34.0-3ubuntu1.1 | | zlib1g-dev | 1:1.2.11.dfsg-2ubuntu9.2 | | pkg-config | 0.29.2-1ubuntu3 | | OpenSSL | 1_1_1t | | QAT Lib | 23.02.0 | | IPP crypto | ippcp_2021.7 | | Intel IPSec | v1.3 | | QAT Engine | v0.6.19 | | numactl | 2.0.14-3ubuntu2 | | libprocps8 | 2:3.3.17-6ubuntu2 | | zlib1g | 1:1.2.11.dfsg-2ubuntu9.2 |

Configuration Snippets

This section contains code snippets on build instructions for components.

Note: Common Linux utilities, such as docker, git, wget, may not be listed here. Please install on demand if it is not provided in base OS installation.

Ubuntu

docker pull ubuntu:22.04

Helper libraries (1st part)

apt-get update && apt-get install -y git gcc g++ cmake make automake autoconf libtool nasm yasm perl zlib1g-dev pkg-config

OpenSSL

OPENSSL_INCLUDE_DIR="/usr/local/include/openssl"
OPENSSL_LIBRARIES_DIR="/usr/local/lib"
OPENSSL_ROOT_DIR="/usr/local/bin/openssl"
OPENSSL_VER=1_1_1t
OPENSSL_REPO=https://github.com/openssl/openssl.git

git clone --depth 1 -b OpenSSL_${OPENSSL_VER} ${OPENSSL_REPO} openssl && \
cd openssl && \
./config && \
make depend && \
make -j && \
make install

QAT Lib

QATLIB_VER="23.02.0"
QATLIB_REPO="https://github.com/intel/qatlib.git"
git clone --depth 1 -b ${QATLIB_VER} ${QATLIB_REPO} && \
cd qatlib && \
./autogen.sh && \
./configure --prefix=/usr/local/ \ 
    --enable-systemd=no \
    --enable-service && \
make -j && \
make install && \
make samples-install 

IPP Crypto

IPP_CRYPTO_VER="ippcp_2021.7"
IPP_CRYPTO_REPO="https://github.com/intel/ipp-crypto"
git clone --depth 1 -b ${IPP_CRYPTO_VER} ${IPP_CRYPTO_REPO} && \
cd ipp-crypto/sources/ippcp/crypto_mb && \
cmake . -B"../build" \
    -DOPENSSL_INCLUDE_DIR=${OPENSSL_INCLUDE_DIR} \
    -DOPENSSL_LIBRARIES=${OPENSSL_LIBRARIES_DIR} \
    -DOPENSSL_ROOT_DIR=${OPENSSL_ROOT_DIR} && \
cd ../build && \
make crypto_mb && make install

Intel IPSec

IPSEC_MB_VER="v1.3"
IPSEC_MB_REPO="https://github.com/intel/intel-ipsec-mb"
git clone --depth 1 -b ${IPSEC_MB_VER} ${IPSEC_MB_REPO} && \
cd intel-ipsec-mb && \
make && make install LIB_INSTALL_DIR=/usr/local/lib

QAT Engine

QATENGINE_VER="v0.6.19"
QATENGINE_REPO="https://github.com/intel/QAT_Engine"
git clone --depth 1 -b ${QATENGINE_VER} ${QATENGINE_REPO} && \
cd QAT_Engine && \
./autogen.sh && \
./configure \
    --enable-multibuff_offload \
    --enable-ipsec_offload \
    --enable-multibuff_ecx \
    --enable-qat_sw  && \
make && make install

Helper libraries (2nd part)

apt-get update && apt-get install -y numactl libprocps8 zlib1g

Additional configuration

echo "/usr/lib/" >> /etc/ld.so.conf.d/all-libs.conf && ldconfig && \
echo "/usr/local/lib/" >> /etc/ld.so.conf.d/all-libs.conf && ldconfig
export OPENSSL_ENGINES=/usr/local/lib/engines-1.1
export PATH="$PATH:/usr/local/ssl/bin"

Workload Services Framework

-end of document-