Hi,

On Sun, Feb 20, 2022 at 10:43:11PM +0100, Bo Berglund wrote:
> >AES-256-GCM is extremely fast on CPUs that have AES-NI support (usually
> >"Intel and AMD").  cipher chacha20-poly1305 is fast on some ARM families
> >that have hardware support for that cipher.
> I don't know what CPU is built into these Asus routers....
> 
> >Compression will slow down your transfers if you are CPU starved.
> 
> I guess I cannot change these on a client-by-client base, right?

That depends on the age of the OpenVPN version installed.  2.4.x and up
can do per-client cipher settings, and (I think) "about anything" can 
do per-client compress settings.

> Both the client ovpn file and the server side conf file have these two
> directives.
> 
> I do have a ccd set up so that I can have special handling when the remote
> Router's built-in client connects to my server.
> Currently there is only an iroute command inside the client's ccd file.

Putting "compress no" and "cipher <somethingtotest>" in there - matching
the client's .ovpn - should work.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to