Home A - Z
Page Index

An Otter Wiki

Commit abead5

2025-05-23 15:25:37 flichtenheld: Update
Development/StatusOfOpenvpn27.md ..
@@ 1,10 1,11 @@
# Introduction
- This page shows the high-level status of OpenVPN 2.7 release. If you want all the details, see the [Active Tickets by Milestone](report:3) report.
+ This page shows the high-level status of OpenVPN 2.7 release.
# Schedule
- Release is roughly planned for two years after OpenVPN 2.6. So end of 2024 or beginning of 2025.
+ Release is roughly planned for two years after OpenVPN 2.6. ~~So end of 2024 or beginning of 2025.~~ Release is currently planned for Summer 2025. First Alpha release is expected in May.
+
It was discussed that we should provide official preview builds earlier this time to gather more feedback for merged changes.
Also, the experience from the 2.6 release was to branch off release/2.7 later, since branching it off too early causes a lot of work for little benefit.
@@ 14,10 15,18 @@
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
|----------------------|-----------------|------------|------------|------------------------|
+ | Support for multiple-protocol sockets (UDP/TCP) | Giaan | Done | #556 | [multisocket topic](https://gerrit.openvpn.net/q/topic:%22multisocket%22) |
+ | dco-win multipeer (--server) | lev | Done | - | [Change 815](https://gerrit.openvpn.net/c/openvpn/+/815) |
+ | New API for DCO kernel module on Linux | ordex | Done | - | [Change 941](https://gerrit.openvpn.net/c/openvpn/+/941) |
+ | Data v3 format with AES rekeying | plaisthos, syzzer | Done | - | [Change 806](https://gerrit.openvpn.net/c/openvpn/+/806) |
| Switch from MSVC buildsystem to CMake for Windows builds | djpig | Done | - | [Change 266](https://gerrit.openvpn.net/c/openvpn/+/266) |
+ | `--cipher`/`--data-ciphers` add DEFAULT syntax | plaisthos | Done | - | [Change 828](https://gerrit.openvpn.net/c/openvpn/+/828) |
+ | Remove wintun driver support | lev | Done | - | [Change 1021](https://gerrit.openvpn.net/c/openvpn/+/1021) |
+ | Remove support for compression on send | djpig | Done | - | [Change 755](https://gerrit.openvpn.net/c/openvpn/+/755) |
| Remove deprecated `--no-replay` | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
| Make it harder to use `--secret` | plaisthos | Done | [Deprecated Options](../Pages/Deprecated%20options) |
| Remove deprecated NTLM v1 support | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
+ | Deprecate NTLM v2 support | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
| Support TLS alerts | plaisthos | Done | - | [Change 449](https://gerrit.openvpn.net/c/openvpn/+/449) |
| Change default for `--topology` to `subnet` | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
| afunix/lwipovpn | plaisthos, cron2 | Done | - | [lwipovpn topic](https://gerrit.openvpn.net/q/topic:%22lwipovpn%22) |
@@ 27,19 36,14 @@
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Gerrit / Patchwork** |
|----------------------|-----------------|------------|------------|------------------------|
- | DNS option rework (split DNS) - windows backend | lev, d12fk | Gerrit | - | - |
- | Support for multiple-protocol sockets (UDP/TCP) | Giaan | Gerrit | #556 | [multisocket topic](https://gerrit.openvpn.net/q/topic:%22multisocket%22) |
- | New API for DCO kernel module on Linux | ordex | Trying to get in mainline first | - | - |
- | Remove wintun driver support | lev | TBD | - | - |
- | Remove support for compression on send | djpig | Gerrit | - | [Change 755](https://gerrit.openvpn.net/c/openvpn/+/755) |
+ | DNS option rework (split DNS) - Windows/Linux/BSD | lev, d12fk | Gerrit, mostly done | - | ["dns option" topic](https://gerrit.openvpn.net/q/topic:%22dns+option%22) |
## should have
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Gerrit / Patchwork** |
|----------------------|-----------------|------------|------------|------------------------|
- | Data v3 format with AES rekeying | plaisthos, syzzer | WIP | - | - |
| Tunnelcrack improvements for Linux | d12fk | TBD | - | - |
- | `--cipher`/`--data-ciphers` add DEFAULT syntax | plaisthos | TBD | - | - |
+
## nice to have / wild ideas
@@ 47,15 51,13 @@
|----------------------|-----------------|------------|------------|------------------------|
| Bloom-filter DDoS protection | plaisthos | Gerrit | - | [bloom topic](https://gerrit.openvpn.net/q/topic:%22bloom%22) |
| Live route updates / push-update | mrbff | Gerrit | - | [push-update-client topic](https://gerrit.openvpn.net/q/topic:%22PushUpdateClient%22) |
- | dco-win multipeer (--server) | lev | WIP | - | - |
| HAProxy support | ralf_lici | Gerrit | - | [proxy-protocol topic](https://gerrit.openvpn.net/q/topic:%22proxy-protocol%22) |
| Transport plugin (primary use case: obfuscation) | giaan | WIP | - | - |
| Remove deprecated --ns-cert-type | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Remove deprecated --tun-ipv6 | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Remove deprecated --max-routes | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Remove deprecated --dhcp-release | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
- | Properly deprecate _v1 and _v2 plugin functions | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
- | Deprecate NTLM v2 support | djpig | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
+ | Properly deprecate \_v1 and \_v2 plugin functions | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Implement kqueue on MacOS | plaisthos | wip (but slower than poll()) | - | - |
| Sort out multiple-plugin auth mess | dazo, cron2 | on-going | - | [RFC patch 2327](https://patchwork.openvpn.net/patch/2327/) |
| Improve NM-OVPN integration | cron2 | trying to establish contact | - | - |
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9