# AES-NI support with nginx

**URL:** <https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271>\
**Category:** NGINX\
**Created:** [February 20, 2015, 4:38am UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271 "2015-02-20T04:38:40Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![addis\_a](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c4cdca/32.png) [@addis\_a](https://www.ruby-forum.com/u/addis_a)\
**Post date:** [February 20, 2015, 4:38am UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271/1 "2015-02-20T04:38:40Z")

</div>

Hi,

Is AES-NI is enabled in nginx 1.7.10 by default, through the openssl evp  
library ([https://www.openssl.org/docs/crypto/evp.html](https://www.openssl.org/docs/crypto/evp.html)), or does it have  
to  
be enabled somehow?

ssl\_engine aesni; gives me an error upon testing the configuration.

Thanks,  
Anlu

---

<div class="post-metadata">

**Author:** ![Anlu\_Wang](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c6cbf5/32.png) [@Anlu\_Wang](https://www.ruby-forum.com/u/Anlu_Wang)\
**Post date:** [February 20, 2015, 6:00am UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271/2 "2015-02-20T06:00:23Z")

</div>

AES-NI is already on, there is no configuration option and it will work  
as  
long as your cpu supports it.

* * *

Kurt C.  
[https://www.x64architecture.com](https://www.x64architecture.com)

---

<div class="post-metadata">

**Author:** ![Anlu\_Wang](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c6cbf5/32.png) [@Anlu\_Wang](https://www.ruby-forum.com/u/Anlu_Wang)\
**Post date:** [March 10, 2015, 8:51am UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271/3 "2015-03-10T08:51:19Z")

</div>

Kurt C. wrote in post #1168394:

> AES-NI is already on, there is no configuration option and it will work  
> as  
> long as your cpu supports it.
> 
> * * *
> 
> Kurt C.  
> [https://www.x64architecture.com](https://www.x64architecture.com)

Can you show me where does the source of information from ?

---

<div class="post-metadata">

**Author:** ![Anlu\_Wang](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c6cbf5/32.png) [@Anlu\_Wang](https://www.ruby-forum.com/u/Anlu_Wang)\
**Post date:** [March 10, 2015, 7:38pm UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271/4 "2015-03-10T19:38:05Z")

</div>

I’m very interested in this issue  
I have a problem with use openssl version and engine AES-NI  
Detail my question:

> <https://stackoverflow.com/questions/28939825/how-to-config-openssl-engine-aes-ni-in-nginx>

Please suggest a solution for me.  
Thank you so much.

---

<div class="post-metadata">

**Author:** ![Anlu\_Wang](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c6cbf5/32.png) [@Anlu\_Wang](https://www.ruby-forum.com/u/Anlu_Wang)\
**Post date:** [March 10, 2015, 7:30pm UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271/5 "2015-03-10T19:30:26Z")

</div>

[http://openssl.6102.n7.nabble.com/having-a-lot-of-troubles-trying-to-get-AES-NI-working-tp44285p44301.html](http://openssl.6102.n7.nabble.com/having-a-lot-of-troubles-trying-to-get-AES-NI-working-tp44285p44301.html)  
[http://openssl.6102.n7.nabble.com/having-a-lot-of-troubles-trying-to-get-AES-NI-working-tp44285p44301.html](http://openssl.6102.n7.nabble.com/having-a-lot-of-troubles-trying-to-get-AES-NI-working-tp44285p44301.html)

---

<div class="post-metadata">

**Author:** ![Anlu\_Wang](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c6cbf5/32.png) [@Anlu\_Wang](https://www.ruby-forum.com/u/Anlu_Wang)\
**Post date:** [March 10, 2015, 8:18pm UTC](https://www.ruby-forum.com/t/aes-ni-support-with-nginx/234271/6 "2015-03-10T20:18:17Z")

</div>

> I’m very interested in this issue  
> I have a problem with use openssl version and engine AES-NI  
> Detail my question:

[http://stackoverflow.com/questions/28939825/how-to-config-openssl-engine-aes-ni-in-nginx](http://stackoverflow.com/questions/28939825/how-to-config-openssl-engine-aes-ni-in-nginx)

> Please suggest a solution for me.

Use official openssl distributions, not some github fork and don’t  
configure any “engines” in nginx.

Best thing for you to do is to used precompiled binaries from [nginx.org](http://nginx.org)  
or your linux distro, instead of compiling them on your own.

Lukas