@UBNT-cmb There's no reason not to have CONFIG_PADATA enabled. However, it's not an option you can directly enable in 3.10. Instead just enable CONFIG_CRYPTO_PCRYPT, which will then select CONFIG_PADATA.
Indeed, I'd like to utilize the crypto offload. I'll check out the kernel sources for what you guys do for the existing offload stuff. Do you have much documentation on what the offloading is capable of? Or is that all NDA'd?
Another thing you could do to improve performance is update to a newer kernel. I had to perform some unholy voodoo to get WireGuard running on 3.10, and such incantations come with some overhead.
If you'd like to coordinate anything privately, feel free to email me directly -- jason @ {myusername} .com
=====
@syso I'm using the Cavium SDK for the compiler in the build. However, I've also had success using gcc 6.3 from Gentoo's crossdev tool. The newer compiler actually produces much faster code, but who knows what the deal is with ancient parts, so I did the prebuilt binaries with the Cavium one. Maybe somebody else can play around with this a bit. The process was fairly basic for compiling the kernel module this way -- the various guides you'll find googling suffice. For the userspace wg(8) utility, I chose to compile it statically against musl libc, because EdgeOS's libc is ancient and weird and 32-bit. Super important: I made sure to set `-mabi=64` in my CFLAGS for compiling libc, libmnl, and the wg(8) utility. The result is a statically linked 64-bit MIPS binary, which is what I ship. Again, this isn't very hard to do, and the thing you need to note is being sure to use `mabi=64`. As for the source, that's all online anyway. Click the links already provided and you should be able to find it easily.
=====
@neilalexander WireGuard is meant to be multithreaded; Ubiquiti just lacks the option for it in their kernel. By the way, looks like you've played the Vyatta game quite a bit. Want to co-maintain the package with @Lochnair? Can give you access to the repo.
