With respect to the crypto patch, here are some results. I thought I already had the hardware crypto acceleration figured out, but I figured I'd play with the patch nitroshift linked. Results below.
Summary: The first 3 tests are on the same unit, different configs. Pretty similar performance in all cases so either I don't have something configured correctly to utilize the new patch or I really already had the hooks in correctly.
Summary 2: The ACS is a significant performance boost over the AC V1.
I'm curious to see others' results. The benchmark test is from: https://wiki.openwrt.org/doc/howto/benchmark.openssl
Suggestions welcome.
WRT1900ACV1 (original - crypto enabled but kmod-cryptodev omitted)
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md5 3919.04k 12942.52k 50038.36k 111872.00k 175590.06k
sha1 3578.38k 10766.21k 24531.88k 32392.42k 38888.71k
des cbc 17009.59k 14717.40k 19040.85k 19180.54k 19202.05k
des ede3 5448.61k 6690.15k 6741.67k 6751.23k 6761.13k
aes-128 cbc 23519.65k 29076.12k 27784.39k 29386.75k 31585.62k
aes-192 cbc 21715.61k 25879.21k 27354.71k 27720.70k 27863.72k
aes-256 cbc 19501.17k 19452.16k 24619.26k 24921.77k 25034.75k
sha256 5033.26k 12509.42k 23378.01k 29813.08k 32342.02k
sha512 1227.03k 3599.94k 6797.83k 9978.88k 11236.69k
sign verify sign/s verify/s
rsa 2048 bits 0.059880s 0.001658s 16.7 603.0
sign verify sign/s verify/s
dsa 2048 bits 0.016336s 0.019343s 61.2 51.7
WRT1900ACV1 (patch for v7 mvebu cesa - crypto enabled but kmod-cryptodev omitted)
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md5 3893.52k 15767.62k 50557.00k 103449.34k 160911.15k
sha1 3603.52k 10843.48k 24628.23k 29980.52k 41549.82k
des cbc 15680.92k 15505.46k 19072.60k 19198.63k 19193.86k
des ede3 6537.94k 6697.39k 6737.83k 6758.74k 6758.40k
aes-128 cbc 23527.13k 24227.16k 30939.36k 31430.66k 28853.43k
aes-192 cbc 21496.98k 25846.62k 27133.90k 27502.75k 27701.56k
aes-256 cbc 16242.34k 23426.54k 24619.32k 24936.45k 24993.79k
sha256 5077.11k 12622.85k 23374.85k 29852.67k 32317.44k
sha512 1229.23k 4928.66k 7171.16k 9900.03k 10235.89k
sign verify sign/s verify/s
rsa 2048 bits 0.059583s 0.001640s 16.8 609.9
sign verify sign/s verify/s
dsa 2048 bits 0.017118s 0.019783s 58.4 50.5
WRT1900ACV1 (patch for v7 mvebu cesa - crypto enabled and kmod-cryptodev included)
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md5 3816.02k 15824.91k 50914.98k 114588.68k 178812.25k
sha1 3623.06k 10911.96k 25118.77k 36703.53k 42401.13k
des cbc 17020.26k 18508.91k 18955.35k 19082.92k 19117.40k
des ede3 6564.88k 6663.68k 6744.36k 6747.10k 6756.35k
aes-128 cbc 23744.24k 28996.22k 30867.11k 31339.52k 31487.32k
aes-192 cbc 21717.79k 25804.27k 27322.54k 27755.88k 27781.80k
aes-256 cbc 19502.92k 23382.10k 24588.71k 24889.34k 24958.29k
sha256 5084.36k 12670.37k 23542.15k 29870.76k 32470.11k
sha512 1236.81k 4974.08k 7269.37k 10143.50k 11220.31k
sign verify sign/s verify/s
rsa 2048 bits 0.060180s 0.001546s 16.6 647.0
sign verify sign/s verify/s
dsa 2048 bits 0.016139s 0.019268s 62.0 51.9
WRT1900ACS (patch for v7 mvebu cesa - crypto enabled and kmod-cryptodev included)
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md5 9589.71k 33065.11k 97222.29k 168946.35k 222761.51k
sha1 6620.08k 18383.19k 38048.85k 52215.10k 58398.04k
des cbc 24182.52k 25267.63k 25670.96k 25637.55k 25612.37k
des ede3 9296.06k 9548.32k 9555.99k 9588.61k 9545.46k
aes-128 cbc 36824.24k 40463.06k 42189.23k 42546.00k 42530.13k
aes-192 cbc 32774.28k 35516.74k 36562.62k 36810.75k 36625.64k
aes-256 cbc 29292.19k 31629.38k 32732.21k 32841.05k 32901.80k
sha256 7302.57k 17023.68k 30489.86k 38166.19k 41529.88k
sha512 1741.23k 7023.30k 10131.78k 13934.96k 15643.99k
sign verify sign/s verify/s
rsa 2048 bits 0.033966s 0.000901s 29.4 1110.2
sign verify sign/s verify/s
dsa 2048 bits 0.009205s 0.011290s 108.6 88.6