On Sun, 20 Feb 2022 21:54:44 +0100, Gert Doering <g...@greenie.muc.de> wrote:
>Hi, > >On Sun, Feb 20, 2022 at 08:19:32PM +0100, Bo Berglund wrote: >> Question (has popped up on the SNB forum concerning use of OpenVPN clients in >> ASUS routers): >> Can the use of the lines below in the ovpn file used by the router affect >> comm >> speed through the tunnel? >> >> cipher AES-256-CBC >> comp-lzo >> >> If another cipher is chosen can the connection transfers be quicker? >> (Considering a computational bottleneck in the Asus RT-AC68U router) > >That depends on the CPU in that box, and the SSL library in use. I am considering exchanging the remote router for a newer model (Asus RT-AC86U) with more computing power... >AES-256-GCM is extremely fast on CPUs that have AES-NI support (usually >"Intel and AMD"). cipher chacha20-poly1305 is fast on some ARM families >that have hardware support for that cipher. I don't know what CPU is built into these Asus routers.... > >Compression will slow down your transfers if you are CPU starved. I guess I cannot change these on a client-by-client base, right? Both the client ovpn file and the server side conf file have these two directives. I do have a ccd set up so that I can have special handling when the remote Router's built-in client connects to my server. Currently there is only an iroute command inside the client's ccd file. -- Bo Berglund Developer in Sweden _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
