Is AES-NI supported in OpnSense:

[Bjur]

Hi I'm considering OpnSense. Have just upgraded my hardware to support AES-NI and want to use OpenVPN with AES-NI hardware acceleration. Will that be supported with OpnSense?

[mimugmail]

OpenVPN runs im userspace, theres no real benefit here. Better use IPsec

[Bjur]

Thanks is it the same in pfsense. I just want highest possible throughput in VPN

[mimugmail]

The same, just use IPsec or WireGuard

[fabian]

AFAIK OpenSSL is compiled with AES-NI support and it is used, if it is there. The only problem is that it is not always usable.

[banym]

What do you mean by not always usable?

Does the tunnel settings be configured in a specific way to make openssl use it?

[fabian]

It depends of the mode in which OpenSSL is running. The high level functions can enable hardware acceleration automatically.

Here is some old GitHub ticket:
https://github.com/opnsense/core/issues/3551