OpenVPN Server + TLS CA Server in internal network

[firewall_wrangler]

Hello there!

I'm going to place OpenVPN Server and TLS CA Server for internal domains in two FreeBSD Jails on the same server and use encrypted partitions to make this system more secure. Is it good enough practice? How could I measure load on every single service?

 

[SirDice]

and use encrypted partitions to make this system more secure.

Note that this is encryption-at-rest. If the servers (or jails) are running the data is accessible unencrypted.