Blame

61306b flichtenheld 2025-10-28 13:17:04 1
# StatusOfOpenvpn28
2
3
# Introduction
4
5
This page shows the high-level status of OpenVPN 2.8 release.
6
7
# Schedule
8
9
Release is roughly planned for two years after OpenVPN 2.7. So end of 2027 or beginning of 2028.
10
11
# Features/fixes to include
12
13
## completed/done
14
15
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
16
|----------------------|-----------------|------------|------------|------------------------|
17
18
## should have
19
20
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Gerrit / Patchwork** |
21
|----------------------|-----------------|------------|------------|------------------------|
22
| Tunnelcrack improvements for Linux | d12fk | TBD | - | - |
23
24
## nice to have / wild ideas
25
26
| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
27
|----------------------|-----------------|------------|------------|------------------------|
28
| Bloom-filter DDoS protection | plaisthos | Gerrit | - | [bloom topic](https://gerrit.openvpn.net/q/topic:%22bloom%22) |
29
| HAProxy support | ralf_lici | Gerrit | - | [proxy-protocol topic](https://gerrit.openvpn.net/q/topic:%22proxy-protocol%22) |
30
| Transport plugin (primary use case: obfuscation) | giaan | WIP | - | - |
31
| Remove deprecated --ns-cert-type | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
32
| Remove deprecated --tun-ipv6 | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
33
| Remove deprecated --max-routes | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
34
| Remove deprecated --dhcp-release | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
35
| Properly deprecate \_v1 and \_v2 plugin functions | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
36
| Implement kqueue on MacOS | plaisthos | wip (but slower than poll()) | - | - |
37
| Sort out multiple-plugin auth mess | dazo, cron2 | on-going | - | [RFC patch 2327](https://patchwork.openvpn.net/patch/2327/) |
38
| Improve NM-OVPN integration | cron2 | trying to establish contact | - | - |
39
| Make TAP6-Windows Really Fast | lev | not started | - | - |
40
| SRV patch (set) | ? | patch needs work | - | - |
41
| Test server that does --auth-user-pass and/or challenge stuff | cron2 (snair) | --auth-user-pass done, challenge missing | - | - |
42
| Maybe: fix radius-plugin - plugin is useful but not maintained very well | ??? | ??? | - | - |
43
| Test framework improvements (local "make check" crypto tests) | syzzer | - | - | - |
44
| Inner VRF support? | ?? | ?? | ?? | - |
45
| Route monitoring (enable clients to react to network changes) | cron2 | not started | - | - |
46
| Maybe: add data channel separation (or, move to ovpn3, which already has this?) | ??? | ??? | - | - |
47
| Support TLS record splitting (like ovpn3) | syzzer | (started, but no patches available yet) | #554 | - |
48
| Improve control channel performance (further) - redo reliability layer, introduce windowing / scaling | syzzer | ??? | - | - |