how to pick cipher for AES-NI enabled AMD GX-412TC SOC tincd at 100% CPU

2020-04-04 Thread Jelle de Jong
Hello everybody, First a big thanks for tinc-vpn I am still using it next to wireguard and openvpn. I am having a setup where the tinc debian appliance is at 100% cpu load doing about 7.5MB/s. Compression = 9 PMTU = 1400 PMTUDiscovery = yes Cipher = aes-128-cbc How can I pick a cipher that

Re: how to pick cipher for AES-NI enabled AMD GX-412TC SOC tincd at 100% CPU

2020-04-04 Thread Fufu Fang
I basically end up using the same cipher suite as Wireguard, it works quite well on my Atom N2800, which does not have AES-NI. It is now 3 times as fast. Cipher = chacha20-poly1305 Digest = blake2b512 On Sat, 2020-04-04 at 20:02 +0200, Jelle de Jong wrote: > Hello everybody, > > First a big tha

Re: how to pick cipher for AES-NI enabled AMD GX-412TC SOC tincd at 100% CPU

2020-04-04 Thread Jelle de Jong
Hello everybody, Thank you Fufu Fang for your quick reply: With tinc version 1.0.35 and the bellow options at 100% CPu load i get about 10 MB/s... PMTU = 1400 PMTUDiscovery = yes #Cipher = none Cipher = chacha20-poly1305 Digest = blake2b512 Tried Cipher = none as well and also got 10MB/s wit