StatusOfOpenvpn28
Introduction
This page shows the high-level status of OpenVPN 2.8 release.
Schedule
Release is roughly planned for two years after OpenVPN 2.7. So end of 2027 or beginning of 2028.
Features/fixes to include
completed/done
| Task description | Assigned to | Status | Ticket | Patchwork / Gerrit |
|---|---|---|---|---|
should have
| Task description | Assigned to | Status | Ticket | Gerrit / Patchwork |
|---|---|---|---|---|
| Tunnelcrack improvements for Linux | d12fk | TBD | - | - |
nice to have / wild ideas
| Task description | Assigned to | Status | Ticket | Patchwork / Gerrit |
|---|---|---|---|---|
| Bloom-filter DDoS protection | plaisthos | Gerrit | - | bloom topic |
| HAProxy support | ralf_lici | Gerrit | - | proxy-protocol topic |
| Transport plugin (primary use case: obfuscation) | giaan | WIP | - | - |
| Remove deprecated --ns-cert-type | - | - | Deprecated Options | - |
| Remove deprecated --tun-ipv6 | - | - | Deprecated Options | - |
| Remove deprecated --max-routes | - | - | Deprecated Options | - |
| Remove deprecated --dhcp-release | - | - | Deprecated Options | - |
| Properly deprecate _v1 and _v2 plugin functions | - | - | Deprecated Options | - |
| Implement kqueue on MacOS | plaisthos | wip (but slower than poll()) | - | - |
| Sort out multiple-plugin auth mess | dazo, cron2 | on-going | - | RFC patch 2327 |
| Improve NM-OVPN integration | cron2 | trying to establish contact | - | - |
| Make TAP6-Windows Really Fast | lev | not started | - | - |
| SRV patch (set) | ? | patch needs work | - | - |
| Test server that does --auth-user-pass and/or challenge stuff | cron2 (snair) | --auth-user-pass done, challenge missing | - | - |
| Maybe: fix radius-plugin - plugin is useful but not maintained very well | ??? | ??? | - | - |
| Test framework improvements (local "make check" crypto tests) | syzzer | - | - | - |
| Inner VRF support? | ?? | ?? | ?? | - |
| Route monitoring (enable clients to react to network changes) | cron2 | not started | - | - |
| Maybe: add data channel separation (or, move to ovpn3, which already has this?) | ??? | ??? | - | - |
| Support TLS record splitting (like ovpn3) | syzzer | (started, but no patches available yet) | #554 | - |
| Improve control channel performance (further) - redo reliability layer, introduce windowing / scaling | syzzer | ??? | - | - |