It is/was a RockPro64 with 4GB oft RAM. The biggest issue I had was with zfs native encryption using aes256-gcm per default. The SoC has AES support but with

It is/was a RockPro64 with 4GB oft RAM. The biggest issue I had was with zfs native encryption using aes256-gcm per default. The SoC has AES support but with gcm the hashing function is not AES based, so i had to change to aes256-ccm to profit from the AES support. For sshd i severly limit available hmac and cipher to use chacha20 but i also force that in the client side. I will post the relevant lines tomorrow. Wireguard is also costing much more CPU performance then I am used to.