OpenVPN Which Cipher to Use

[ericnix]

The OpenVPN Wizard defaulted to AES-256-CBC when I created my VPN on an XG-1541. This has Xeon processors with hardware acceleration.

What would be the optimal setting for best speed and encryption? There are so many options. I'm confused and overwhelmed trying to figure them out.

I think the XG-1541 can handle some decent encryption, and my laptops I use to connect are newer laptops with good processors and ample memory.

Finally, if I change the encryption method, do clients need to download new certificates?

[Rico]

I always use AES-256-GCM.
You don‘t need to export Certs again, but the client Config need to match the cipher.

-Rico