From what I have read, ChaCha20 is designed ground up for software efficiency on general purpose CPUs and is faster than AES where the CPU does not have inbult CPU instructions for AES calculations. So speeds will depend on your router hardware and CPU it uses.Merlin do you still recommend using these specific ciphers under OpenVPN 2.5?
Reason I ask is because I am getting very good speed results now using only CHACHA20-POLY1305 cipher exclusively for both data & control channels under your beta builds tap udp site to site as well as client to server on windows. On another note, would you ever consider adding a control channel data cipher gui box similar to the data channel? Not that big of a deal but tls-ciphersuites TLS_CHACHA20_POLY1305_SHA256 is the only OpenVPN client custom option I am currently setting into the gui?
Personally, I am using 386.1 Beta 2 with AES-128-GCM with the router VPN client and I have observed I hit my Internet plan upper limits (50/25 MBit) and no noticeable router CPU load, I have looked no deeper for better options.
Last edited: