Virtualized KAE

Kunpeng Accelerator Engine (KAE) is a hardware acceleration solution based on the Kunpeng processor. It includes KAE encryption and decryption as well as KAEzip. Virtualized KAE (vKAE) devices can also enable KAE capabilities in VMs or containers.

The KAE encryption and decryption module uses KAE to implement the RSA, SM3, SM4, DH, MD5, and AES algorithms. It provides high-performance symmetric and asymmetric encryption/decryption algorithms based on the lossless user-mode driver framework. Compatible with OpenSSL 1.1.1a and later versions, it supports the synchronous and asynchronous mechanisms.

For details, see Developer Guide (KAE Encryption & Decryption).

Advantages and Benefits

KAE encryption and decryption and KAEzip are used to accelerate SSL/TLS applications and data compression, respectively. They can significantly reduce processor consumption and improve processor efficiency. In addition, KAE shields the internal implementation details from the application layer. You can quickly migrate services by using the standard OpenSSL and zlib interfaces.

Key Technologies

• The KAE device on the host supports the SR-IOV technology, which enables the host KAE device to be passed through to the VM based on the virtual function (VF).
• The accelerator engine is installed on the VM and is associated with an open ecosystem library to implement acceleration that is transparent to applications.

Application Scope

It can be deployed on Kunpeng VMs and applied to services in which encryption, decryption, and decompression are frequently involved.