Blame

e4ff78 Samuli Seppänen 2025-02-27 13:12:06 1
# Data Channel Offload: supported features
2
3
This page aims at summarizing all data channel features and their support status in the DCO modules across the supported platforms.\\
4
New features may be added over time, therefore keep an eye on this page if interested.
5
6
Please, also note that some features, like compression are considered to be legacy and expected to never be implemented in ovpn-dco. This is a design decision aimed at keeping ovpn-dco as simple as possible, while also taking the chance to drop those functionalities that are not consider useful anymore (or even harmful!).
7
8
## Supported features by platform
9
10
This table is constantly work in progress, therefore expect changes over time.
11
12
|**Feature**|**Windows**|**Linux**|**FreeBSD**|**Remark**|
13
|-|-|-|-|-|
14
|TUN mode (L3)| yes| yes| yes| |
15
|TAP mode (L2)| no| no| no| not planned|
98159e cron2 2025-05-28 12:25:01 16
|Mode: client, P2MP/server| client, server | client, server| client, server| |
e4ff78 Samuli Seppänen 2025-02-27 13:12:06 17
|UDP as transport| yes| yes| yes| |
98159e cron2 2025-05-28 12:25:01 18
|TCP as transport| yes (not for server)| yes| no| |
e4ff78 Samuli Seppänen 2025-02-27 13:12:06 19
|Ciphers| AES-GCM| AES-GCM| AES-GCM| |
20
| | ChaCha20-Poly1305 (Win11 only)| ChaCha20-Poly1305| ChaCha20-Poly1305| |
6c0bc5 cron2 2025-07-19 09:02:31 21
|AEAD Epoch Keys| no | no | no | desirable |
d25374 cron2 2025-07-19 09:01:17 22
|Internal routes handling ```--iroute```| yes| standard system routes| yes (do not use identical route/iroute masks)| |
e4ff78 Samuli Seppänen 2025-02-27 13:12:06 23
|Outside fragmentation (inside MTU 1500)| yes| handled by kernel| yes (to be tested)| |
24
|OpenVPN fragmentation (```--fragment```)| no| no| no| not planned|
25
|MSS mangling ```--mssfix```| yes| no (can be done via nft)| no (can be done via pf)| desirable|
26
|Compression| no| no| no| not planned|
27
|OCC packets in data channel| ?| no| ?| required for mtu-test (other use cases?) |
28
|RPF check (server only)| n/a| yes| ?|
29
|Topology other than subnet ```--topology net30\|p2p```| no| no| no| not planned|
d25374 cron2 2025-07-19 09:01:17 30
|--float on TLS server|yes |yes|no|2.7_alpha3 needed to receive kernel notifications|
98159e cron2 2025-05-28 12:25:01 31
|--float on TLS client|no|no|no||