The OpenVPN community project team is proud to release OpenVPN 2.7.0.
-
This is the new stable version of OpenVPN with some major new features.
-
-
This release has only minor changes relative to the last release candidate release 2.7_rc6.
-
For a list of these changes see the [git log](https://github.com/OpenVPN/openvpn/compare/v2.7_rc6...v2.7.0).
-
-
Highlights of 2.7 include:
-
* Multi-socket support for servers -- Handle multiple addresses/ports/protocols within one server
-
* Improved Client support for DNS options
-
* Client implementations for Linux/BSD/macOS, included with the default install
-
* New client implementation for Windows, adding support for features like split DNS and DNSSEC
-
* Architectural improvements on Windows
-
* The `block-local` flag is now enforced with WFP filters
-
* Windows network adapters are now generated on demand
-
* Windows automatic service now runs as an unpriviledged user
-
* Support for server mode in win-dco driver
-
* Note: Support for the wintun driver has been removed. win-dco is now the default, tap-windows6 is the fallback solution for use-cases not covered by win-dco.
-
* Improved data channel
-
* Enforcement of AES-GCM usage limit
-
* Epoch data keys and packet format
-
* Support for new upstream DCO Linux kernel module
-
* This release supports the new `ovpn` DCO Linux kernel module which is available in current upstream Linux kernel releases. Backports of the new module to older kernels are available via the [ovpn-backports project](https://github.com/OpenVPN/ovpn-backports).
-
* Client-side support for new `PUSH_UPDATE` control-channel message
-
* This allows servers to send updates to options like routing and DNS config without triggering a reconnect.
-
* PUSH_UPDATE server support (minimal)
-
* New management interface commands `push-update-broad` and `push-update-cid` to send PUSH_UPDATE option updates.
-
* TLS 1.3 support with bleeding-edge mbedTLS versions
-
* Support for mbedTLS version 4
-
* Two new environment variables have been introduced to communicate desired default gateway redirection to plugins like Network Manager.
-
* Support for Epoch data channel on Windows, using the win-dco driver (2.8.0+)
-
* "Recursive Routing" check is now more granular, and will only drop packets-in-tunnel if destination IP, protocol and port matches with those needed to reach the VPN server.
-
* COPYING: license details only relevant to our Windows installers have been updated and moved to the openvpn-build repo
-
-
For details see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.7.0/Changes.rst)
-
-
Note: Windows MSI was updated to I017 on February 19th. Changes in I017:
-
* msi: use Wix Util:EventSource to register OpenVPNService event source instead of PowerShell. GH: [openvpn-build #1230](https://github.com/OpenVPN/openvpn-build/issues/1230)
For Community-maintained packages for Linux distributions see [OpenVPN Software Repositories](/Pages/OpenVPN%20software%20repos). Note that the Fedora Copr repositories have been moved to the @OpenVPN group account and that there are new repositories available on openSUSE Buildservice.
+
For Community-maintained packages for Linux distributions see [OpenVPN Software Repositories](/Pages/OpenVPN%20software%20repos).
## OpenVPN 2.6.19 -- Released 4 February 2026
The OpenVPN community project team is proud to release OpenVPN 2.6.19. This is a bugfix release.
