On Sun, 20 Feb 2022 21:54:44 +0100, Gert Doering <g...@greenie.muc.de> wrote:

>Hi,
>
>On Sun, Feb 20, 2022 at 08:19:32PM +0100, Bo Berglund wrote:
>> Question (has popped up on the SNB forum concerning use of OpenVPN clients in
>> ASUS routers):
>> Can the use of the lines below in the ovpn file used by the router affect 
>> comm
>> speed through the tunnel?
>> 
>> cipher AES-256-CBC
>> comp-lzo
>> 
>> If another cipher is chosen can the connection transfers be quicker?
>> (Considering a computational bottleneck in the Asus RT-AC68U router)
>
>That depends on the CPU in that box, and the SSL library in use.

I am considering exchanging the remote router for a newer model (Asus RT-AC86U)
with more computing power...

>AES-256-GCM is extremely fast on CPUs that have AES-NI support (usually
>"Intel and AMD").  cipher chacha20-poly1305 is fast on some ARM families
>that have hardware support for that cipher.

I don't know what CPU is built into these Asus routers....

>
>Compression will slow down your transfers if you are CPU starved.

I guess I cannot change these on a client-by-client base, right?
Both the client ovpn file and the server side conf file have these two
directives.

I do have a ccd set up so that I can have special handling when the remote
Router's built-in client connects to my server.
Currently there is only an iroute command inside the client's ccd file.


-- 
Bo Berglund
Developer in Sweden



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to