DES vs AES for site-to-site VPN

[Rednarb]

More specifically, TDES (a.k.a. 3DES) vs AES128, AES192, and AES256.

From what I can tell AES is easier on the hardware and thus can be a bit faster in overall throughput.

Also, at 128 its just as or almost as stong as TDES, and even stronger at 192 and 256.

So, what do you use and why? Is there any quantifiable evidence to support one being better than the other? What about the NSA's involvement in both?

 

[lyndonl]

We use AES-256 on out Cisco VPN clients.
I have to say that it is pretty fast and the overhead is minimal
to give you an idea on a 64kbs link i can get upto about 7.6 to 7.8kBs throughput and with out the VPN client running I max out at about the same