New pfsense router - setup openvpn which encryption for AES-NI

[stevetoza]

Hi all,

I'm just setting up a new pfSense router for our office, which we will be using OpenVPN for staff, so they can connect inbound. The CPU has AES-NI, I was wondering what was the best option in terms of

Encryption Algorithm
NCP Algorithms
Auth digest algorithm

The speed etc. I've searched the forums theres so much information around this.

Many Thanks
Steve

[KOM]

I would just try with the defaults and then start looking for solutions if you have an actual problem with performance.

[stevetoza]

@KOM - thanks for the reply, what defaults would you choose?

[JKnott]

@stevetoza said in New pfsense router - setup openvpn which encryption for AES-NI:

@KOM - thanks for the reply, what defaults would you choose?

The default ones.

[Rico]

Personally I suggest AES-256-GCM or AES-128-GCM depending on horse power.

-Rico

[stevetoza]

@rico Thanks, its a
Intel(R) Atom(TM) CPU E3845 @ 1.91GHz
4 CPUs: 1 package(s) x 4 core(s)
AES-NI CPU Crypto: Yes (active)

What would you choose for the below settings

Encryption Algorithm
NCP Algorithms
Auth digest algorithm

[Rico]

My OpenVPN RAS Settings:

I don't use/like NCP. ;-)

-Rico

[stevetoza]

@rico Thanks for sharing