Could you integrate the tinc binary with the next versions of your firmware so that it could benefit from your optimizations?
Part of my optimizations were with OpenVPN itself (that was the last optimization that increased performance by 10%), and part with OpenSSL. Entware also has the same OpenSSL optimizations, so any package from Entware should run just as fast as if I had compiled it against my own library.
What I do not understand is why entware says the package is 1.0.1c but version shows 1.0.0j
Executables in the firmware are compiled against the included OpenSSL 1.0.0, and those in Entware against the 1.0.1 version part of Entware. So if you run the openssl command part of the firmware, it will use the firmware version of the library. But anything installed from Entware that uses OpenSSL will use the 1.0.1 version that comes from Entware.