The OpenVPN community project team is proud to release OpenVPN 2.7_alpha3. This is the third Alpha release for the feature release 2.7.0. As the Alpha name implies this is an early release build, it is not intended for production use.
+
+
Feature changes since 2.7_alpha2:
+
* ``--dns-updown`` script for macOS
+
* Client-side support for PUSH_UPDATE handling
+
* Support for floating TLS clients when DCO is active (requires latest versions of DCO drivers)
+
* Use of user-defined routing tables on Linux
+
* PQE support for WolfSSL
+
+
Important bug fixes since 2.7_alpha2:
+
* Fix issue in handling DCO messages on Linux that could lead to various problems due to unhandled messages
+
* Fix issues with DHCP on Windows with tap driver
+
+
For a list of all changes see the [git log](https://github.com/OpenVPN/openvpn/compare/v2.7_alpha2...v2.7_alpha3).
+
+
Highlights of 2.7 include:
+
* Multi-socket support for servers -- Handle multiple addresses/ports/protocols within one server
+
* Improved Client support for DNS options
+
* Client implementations for Linux/BSD/macOS, included with the default install
+
* New client implementation for Windows, adding support for features like split DNS and DNSSEC
+
* Architectural improvements on Windows
+
* The `block-local` flag is now enforced with WFP filters
+
* Windows network adapters are now generated on demand
+
* Windows automatic service now runs as an unpriviledged user
+
* Support for server mode in win-dco driver
+
* Note: Support for the wintun driver has been removed. win-dco is now the default, tap-windows6 is the fallback solution for use-cases not covered by win-dco.
+
* Improved data channel
+
* Enforcement of AES-GCM usage limit
+
* Epoch data keys and packet format
+
* Support for new upstream DCO Linux kernel module
+
* This release supports the new `ovpn` DCO Linux kernel module which will be available in future upstream Linux kernel releases. Backports of the new module to current kernels are available via the [ovpn-backports project](https://github.com/OpenVPN/ovpn-backports).
+
* Client-side support for new `PUSH_UPDATE` control-channel message
+
* This allows servers to send updates to options like routing and DNS config without triggering a reconnect.
+
* TLS 1.3 support with bleeding-edge mbedTLS versions
+
+
For details see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.7_alpha3/Changes.rst)
For Community-maintained packages for Linux distributions see [OpenVPN Software Repositories](/Pages/OpenVPN%20software%20repos). Note that the Fedora Copr repositories have been moved to the @OpenVPN group account and that there are new repositories available on openSUSE Buildservice.
+
## OpenVPN 2.7_alpha2 -- Released 19 June 2025
The OpenVPN community project team is proud to release OpenVPN 2.7_alpha2. This is the second Alpha release containing bugfixes and one security fix for the feature release 2.7.0. As the Alpha name implies this is an early release build, this is not intended for production use.
