Just enabled BSD-Crypto, didn’t have to reboot, and enabled that under OpenVPN. No difference, TCP or UDP.
I am using a Hyper-V VM to test via a speedtest.net site. I am not sure what you mean by what is at the other end of that VPN.
You should be getting far better performance using openvpn than you currently are - have you checked that hardware acceleration is turned on for crypto? I’d recommend using an AES GCM cipher - this should be accelerated by the CPU. I’d be expecting 200-300 Mbit at least.
I’m not too sure about whether IPSec or L2TP setups are multi-thread, but I’m going to guess they aren’t.
Your CPU has AES-NI, just in case you thought it doesn’t.
Alternatively, you could swap to a CPU with higher clock speed and lower core count? Something like an E5-1620 would be perfect - drop in replacement for your current CPU but now you have a base clock speed of 3.6GHz, and boost of 3.8. It has AES-NI, and they’re dirt cheap on eBay (make sure you get a first gen one, not a V2, V4, etc).
Intel ark link: https://ark.intel.com/content/www/us/en/ark/products/64621/intel-xeon-processor-e5-1620-10m-cache-3-60-ghz-0-0-gt-s-intel-qpi.html
You may want to restart after making that change. Either that or test your VPN connection on a client computer with the openvpn software to see if its the VPN provider who can’t reach those speeds or if its the router
One side of the VPN is your Quotom box, what is on the other side? What is the server?
Yes, the CPU has AES-NI, it’s enabled, however, OpenVPN can’t select it as a hardware crypto accelerator. I’ve since enabled AES-NI & BSD crypto in system/advanced, haven’t rebooted yet (can’t until next maintenance window), and now I get a BSD-crypto option. Having that enabled now, and changing to CBC ciphers doesn’t make a diff, so I dunno if it needs a reboot, or it’s just the way it is.
Mullvad. I used PIA before but I found it to be slower than I would have liked.
It should be available immediately. There’s a good docs page with some details here:
You can check that it’s properly enabled and that everything else is lined up to make use of the acceleration.