Home A - Z
Page Index

An Otter Wiki

Blame

c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 1 
# Introduction
2
abead5 flichtenheld 2025-05-23 15:25:37 3
This page shows the high-level status of OpenVPN 2.7 release.
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 4
5
# Schedule
6
abead5 flichtenheld 2025-05-23 15:25:37 7
Release is roughly planned for two years after OpenVPN 2.6. ~~So end of 2024 or beginning of 2025.~~ Release is currently planned for Summer 2025. First Alpha release is expected in May.
8
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 9
It was discussed that we should provide official preview builds earlier this time to gather more feedback for merged changes.
10
Also, the experience from the 2.6 release was to branch off release/2.7 later, since branching it off too early causes a lot of work for little benefit.
11
12
# Features/fixes to include
13
14
## completed/done
15
16
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
17
|----------------------|-----------------|------------|------------|------------------------|
abead5 flichtenheld 2025-05-23 15:25:37 18
| Support for multiple-protocol sockets (UDP/TCP) | Giaan | Done | #556 | [multisocket topic](https://gerrit.openvpn.net/q/topic:%22multisocket%22) |
19
| dco-win multipeer (--server) | lev | Done | - | [Change 815](https://gerrit.openvpn.net/c/openvpn/+/815) |
20
| New API for DCO kernel module on Linux | ordex | Done | - | [Change 941](https://gerrit.openvpn.net/c/openvpn/+/941) |
21
| Data v3 format with AES rekeying | plaisthos, syzzer | Done | - | [Change 806](https://gerrit.openvpn.net/c/openvpn/+/806) |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 22
| Switch from MSVC buildsystem to CMake for Windows builds | djpig | Done | - | [Change 266](https://gerrit.openvpn.net/c/openvpn/+/266) |
abead5 flichtenheld 2025-05-23 15:25:37 23
| `--cipher`/`--data-ciphers` add DEFAULT syntax | plaisthos | Done | - | [Change 828](https://gerrit.openvpn.net/c/openvpn/+/828) |
24
| Remove wintun driver support | lev | Done | - | [Change 1021](https://gerrit.openvpn.net/c/openvpn/+/1021) |
25
| Remove support for compression on send | djpig | Done | - | [Change 755](https://gerrit.openvpn.net/c/openvpn/+/755) |
9ad98e Samuli Seppänen 2025-01-29 12:45:51 26
| Remove deprecated `--no-replay` | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
27
| Make it harder to use `--secret` | plaisthos | Done | [Deprecated Options](../Pages/Deprecated%20options) |
28
| Remove deprecated NTLM v1 support | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
abead5 flichtenheld 2025-05-23 15:25:37 29
| Deprecate NTLM v2 support | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 30
| Support TLS alerts | plaisthos | Done | - | [Change 449](https://gerrit.openvpn.net/c/openvpn/+/449) |
9ad98e Samuli Seppänen 2025-01-29 12:45:51 31
| Change default for `--topology` to `subnet` | djpig | Done | [Deprecated Options](../Pages/Deprecated%20options) |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 32
| afunix/lwipovpn | plaisthos, cron2 | Done | - | [lwipovpn topic](https://gerrit.openvpn.net/q/topic:%22lwipovpn%22) |
33
| Tunnelcrack improvements for Windows | d12fk | Done | - | [Change 489](https://gerrit.openvpn.net/c/openvpn/+/489) |
0ca47f flichtenheld 2025-10-28 13:14:57 34
| DNS option rework (split DNS) - Windows/Linux/BSD | lev, d12fk | Done | - | ["dns option" topic](https://gerrit.openvpn.net/q/topic:%22dns+option%22) |
35
| Live route updates / push-update | mrbff | Done | - | [push-update-client topic](https://gerrit.openvpn.net/q/topic:%22PushUpdateClient%22) |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 36
37
## should have
38
39
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Gerrit / Patchwork** |
40
|----------------------|-----------------|------------|------------|------------------------|
41
| Tunnelcrack improvements for Linux | d12fk | TBD | - | - |
abead5 flichtenheld 2025-05-23 15:25:37 42
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 43
44
## nice to have / wild ideas
45
46
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
47
|----------------------|-----------------|------------|------------|------------------------|
48
| Bloom-filter DDoS protection | plaisthos | Gerrit | - | [bloom topic](https://gerrit.openvpn.net/q/topic:%22bloom%22) |
49
| HAProxy support | ralf_lici | Gerrit | - | [proxy-protocol topic](https://gerrit.openvpn.net/q/topic:%22proxy-protocol%22) |
50
| Transport plugin (primary use case: obfuscation) | giaan | WIP | - | - |
9ad98e Samuli Seppänen 2025-01-29 12:45:51 51
| Remove deprecated --ns-cert-type | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
52
| Remove deprecated --tun-ipv6 | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
53
| Remove deprecated --max-routes | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
54
| Remove deprecated --dhcp-release | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
abead5 flichtenheld 2025-05-23 15:25:37 55
| Properly deprecate \_v1 and \_v2 plugin functions | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 56
| Implement kqueue on MacOS | plaisthos | wip (but slower than poll()) | - | - |
57
| Sort out multiple-plugin auth mess | dazo, cron2 | on-going | - | [RFC patch 2327](https://patchwork.openvpn.net/patch/2327/) |
58
| Improve NM-OVPN integration | cron2 | trying to establish contact | - | - |
59
| Make TAP6-Windows Really Fast | lev | not started | - | - |
60
| SRV patch (set) | ? | patch needs work | - | - |
61
| Test server that does --auth-user-pass and/or challenge stuff | cron2 (snair) | --auth-user-pass done, challenge missing | - | - |
34f2d1 flichtenheld 2025-10-26 11:26:54 62
| ~~Update OpenVPN PRF (move away from SHA1/MD5)~~ | syzzer/plaisthos | "done" by moving to EKM | - | - |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 63
| Maybe: fix radius-plugin - plugin is useful but not maintained very well | ??? | ??? | - | - |
64
| Test framework improvements (local "make check" crypto tests) | syzzer | - | - | - |
65
| Inner VRF support? | ?? | ?? | ?? | - |
66
| Route monitoring (enable clients to react to network changes) | cron2 | not started | - | - |
34f2d1 flichtenheld 2025-10-26 11:26:54 67
| ~~Maybe: add PRF plugin interface~~ | - | obsolete | - | - |
68
| ~~Maybe: add key exchange plugin interface (allows easily doing .e.g post quantum kex)~~ | - | obsolete | - | - |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 69
| Maybe: add data channel separation (or, move to ovpn3, which already has this?) | ??? | ??? | - | - |
34f2d1 flichtenheld 2025-10-26 11:26:54 70
| ~~Investigate TUNSLMODE on FreeBSD and NetBSD to get rid of iroute table (iroutes become normal system routes)~~ | cron2 | obsolete | - | - |
71
| ~~Dynamic routes ('route in ccd-file'), depends on netlink support~~ | ordex | obsolete | - | - |
72
| ~~[tftp/wpad patch](http://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg10511.html)~~ | jjk | patch on list, obsolete | - | - |
c9d9c9 Samuli Seppänen 2025-01-29 12:06:32 73
| Support TLS record splitting (like ovpn3) | syzzer | (started, but no patches available yet) | #554 | - |
b1c047 flichtenheld 2025-04-01 14:54:26 74
| Improve control channel performance (further) - redo reliability layer, introduce windowing / scaling | syzzer | ??? | - | - |