Hi Sophos XG Team . Many newer devices and cloud providers now are starting to default to GCM for *MUCH* better ipsec performance.By a factor of 5-10 in some of our use cases.
I had a look in /_conf/ipsec/strongswan.d/charon on one of our boxes but it doesn't look like the gcm plugin is available from what I can gather.
Could you look into the following as this seems to what most of the cloud providers are starting to default to.
AES-GCM-128-8, AES-GCM-192-8, AES-GCM-256-8
AES-GCM-128-12, AES-GCM-192-12, AES-GCM-256-12
AES-GCM-128-16, AES-GCM-192-16, AES-GCM-256-16
This thread was automatically locked due to age.
