if you were to recommend a cipher/mode configuration that emphasizes performance for your customers, would you recommend a hardware based accelerated solution over one that isn't? For big data at rest/transit what are some good cipher/mode choices that work well with hardware accelerators?
In particular, I am thinking of the context of loading hadoop clusters in the cloud from on premise. Assuming it's not a managed VPN, would it make more sense to go with ChaCha/Poly or hardware accelerated AES? My thoughts are that the developer loading the cloud will likely have a beefy machine so it should have pretty modern CPUs - therefore I'm thinking of using TLS AES-GCM (I am trying to avoid rolling my own transit security protocol, but this may be necessary).
As this is Big Data, this becomes a significant performance issue when you're talking TB worth of data.
For big data at rest in the cluster, I am thinking definitely hardware accelerated AES, though not sure about the mode of operation. My understanding is that GCM has opcodes in modern CPUs, however, because of the TLS support so that might be a good performant choice.
(Btw, I understand that supporting all modern secure suites is a good idea, but I am looking for strong default configs on both client/server).