On suitable hardware platforms, FreeBSD/OPNsense supports hardware acceleration for crypto. Verified with https://stackoverflow.com/a/28614159/5424487
TOR however is not set up to make use of this. This change should enable it. From https://www.freebsd.org/cgi/man.cgi?tor(1):
```
HardwareAccel 0|1
If non-zero, try to use built-in (static) crypto hardware
acceleration when available. Can not be changed while tor is
running. (Default: 0)
```
Because TOR (or rather OpenSSL) will fall back to software crypto when hardware crypto is not available (unless `AccelName` is also set), i see no need to make this flag configurable in the web UI, making this a very trivial PR :)
* Quick fixes to allow IPv6 and Outboundbinding
-allow specification of secondary ORPort (intended for IPv6)
-allow specification of 2 source addresses via source IP fields,
especially usefull for exits.
-default directory port to 9030 and set to mandatory (needed for relay)
All of the IPv6 fields use the same input verification as the HOST
field, should perhaps be changed?
* ...
* forgot torrc....
* Include manual config in torrc file
include optional /usr/local/etc/torrc.exitpolicy after after exit
policies set via interface before default reject to allow easy config of
custom exit policy.
* Cleanup for merge
* Scheduler KIST is Linux 2.6.39+ only, should not be enabled on BSD
https://www.torproject.org/docs/tor-manual.html.en
* Cleaning up torrc whitespaces, fixed regex
* fixing up things
* Do actual IPv4 validation (reject any invalid IPv4)
* Provide dropdown menu on general settings tab to allow choice in scheduler order and schedulers with following options:
-KISTLite,Vanilla (default)
-Vanilla,KISTLite
-KISTLite
-Vanilla
* fixed missing options
* whitespace
* removed comma from default option for scheduler
* Delete opnsense.tgz
* Adding settings for Exits to new Exit Settings tab.
* Fixed ExitACL to allow wildcards.
Removed usage of accept6/reject6 in favor of accept *4 and *6
Using 'any' for wildcard networks, which coincidentally won't break validation
* Moved all exit options back to under relay pane.
added some more options for exits
* whitespaces
* whitespace
* remove leftover unused exit.xml
exit.xml was leftover from approach with separate page for exit settings.
Removing, is unused
* Quick fixes to allow IPv6 and Outboundbinding
-allow specification of secondary ORPort (intended for IPv6)
-allow specification of 2 source addresses via source IP fields,
especially usefull for exits.
-default directory port to 9030 and set to mandatory (needed for relay)
All of the IPv6 fields use the same input verification as the HOST
field, should perhaps be changed?
* ...
* forgot torrc....
* Include manual config in torrc file
include optional /usr/local/etc/torrc.exitpolicy after after exit
policies set via interface before default reject to allow easy config of
custom exit policy.
* Cleanup for merge
* Scheduler KIST is Linux 2.6.39+ only, should not be enabled on BSD
https://www.torproject.org/docs/tor-manual.html.en
* Cleaning up torrc whitespaces, fixed regex
* fixing up things
* Do actual IPv4 validation (reject any invalid IPv4)
* Provide dropdown menu on general settings tab to allow choice in scheduler order and schedulers with following options:
-KISTLite,Vanilla (default)
-Vanilla,KISTLite
-KISTLite
-Vanilla
* fixed missing options
* whitespace
* removed comma from default option for scheduler
* Delete opnsense.tgz
Franco Fichtner