Following this thread. My employer also mandates OpenVPN, interested in the 2.6 upgrade path.
openvpn still relevant? My employer mandates it
I upgrade to OpenVPN 2.6 from the official repository! The TLS 1.3 it works! The handshake it is faster!
My test tonight:
- Old config CBC + TLS 1.2: 45Mbps download
- New config GCM + TLS 1.3: 67Mbps download
Same server, same time, three tests each. The single variable it is hard because I change the cipher also, but the TLS 1.3 it feels snappier on the web page load.
Thank you all! I will ask the employer about tls-crypt-v2 next week.
Then you did not follow instructions. Your "feels snappier" is not data. Your 67 vs 45 is confounded. Do it properly or do not report numbers.
-t
The «feels snappier» it is the TLS 1.3! The 0-RTT! The round trips they are less! The web page it has many request! Each TLS handshake it is faster!
But for the single file download, the difference it is only the cipher! The GCM it is faster! You are both correct!