SSTP change encryption from CBC to CTR

RouterOS General
1

Hi.

Is any way to change default encryption algorithm in SSTP from AES 256 CBC to AES 256 CTR ?. Because mikrotik has known issue with CBC causing very poor performance and for now only way to improve that is change to CTR at least in IPSEC, and i suppose this same is in SSTP.

2

That’s not applicable to SSTP. The known issue you’re referring to is happening on CCR devices when hardware-accelerate encryption is used, but HW-accelerated encryption only works with IPsec.

3

Hi.

So what can call problem with very poor transfer on SSTP. Place where is Mikrotih have 600/60Mbps line, and client computer have 40/40Mbps line.
On PPTP and use TCP single connection i got transfer arount 35 Mbps, with is fine, but on SSTP i got only 1 - 1,3 Mpbs.