What is the best way to set up OpenVpn?

Question

openvpn

Hello! I started using openVpn (to bypass provider blocking), I would like to hear advice on setting up some parameters. (vk, mail, yandex opens anyway, but once openVpn has been raised, I want to configure it optimally and forget it once)
To check anonymity, I use 2ip.ru/privacy
Configuration:
VPS (kvm), Ubuntu 16.04, OpenVpn (2.3.10- lubuntu2), OpenVpn clients on windows and andoid.
OpenVpn upd/1194,AES-128-CBC,SHA256
1) mssfix set in server.conf and client.conf to 1330 (advise a multiple of 10 instead of 1500 to hide the VPN fingerprint)
maybe there are other ways, or a more optimal value?
2) "block-outside-dns" set the line in client.conf , helped indnsleaktest.com
is no longer displayed by the provider's dns (there was a problem for the windows 10 client)
, maybe there are some other settings about this?
3) Tunnel definition (two-way ping) changed "ACCEPT" in line "-A ufw-before-input -p icmp --icmp-type echo-request -j ACCEPT" to "DROP" in /etc/ufw/before.rules
is this a good solution or is there a better one?
I will be glad to other advice on the best openVpn setup

Answer 1

Well, what is it - AES-128-CBC, if it comes to that it is better to install 256-bit encryption AES-256-CBC
Unfortunately, you are moving in the wrong direction.
As for testing, it is better to use this service:
https://do-know.com/privacy-test.html
But it will not show everything that can be obtained.
I recommend to study qubes-os.org , maybe after that you will have a slightly different idea of ​​​​anonymity.
PS: For general information. Visit the lwplxqzvmgu43uff.onion forum for some more information.

Answer 2

Everything is already set up here:
p.umputun.com/p/2014/08/12/svoi-sobstviennyi-vpn-z...
It remains only to install the docker or raise it from the image.