# StatusOfOpenvpn28

# Introduction

This page shows the high-level status of OpenVPN 2.8 release.

# Schedule

Release is roughly planned for two years after OpenVPN 2.7. So end of 2027 or beginning of 2028.

# Features/fixes to include

## completed/done

| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
|----------------------|-----------------|------------|------------|------------------------|

## should have

| **Task description** | **Assigned to** | **Status** | **Ticket** | **Gerrit / Patchwork** |
|----------------------|-----------------|------------|------------|------------------------|
| Tunnelcrack improvements for Linux | d12fk | TBD | - | - |

## nice to have / wild ideas

| **Task description** | **Assigned to** | **Status** | **Ticket** | **Patchwork / Gerrit** |
|----------------------|-----------------|------------|------------|------------------------|
| Bloom-filter DDoS protection | plaisthos | Gerrit | - | [bloom topic](https://gerrit.openvpn.net/q/topic:%22bloom%22) |
| HAProxy support | ralf_lici | Gerrit | - | [proxy-protocol topic](https://gerrit.openvpn.net/q/topic:%22proxy-protocol%22) |
| Transport plugin (primary use case: obfuscation) | giaan | WIP | - | - |
| Remove deprecated --ns-cert-type | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Remove deprecated --tun-ipv6 | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Remove deprecated --max-routes | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Remove deprecated --dhcp-release | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Properly deprecate \_v1 and \_v2 plugin functions | - | - | [Deprecated Options](../Pages/Deprecated%20options) | - |
| Implement kqueue on MacOS | plaisthos | wip (but slower than poll()) | - | - |
| Sort out multiple-plugin auth mess | dazo, cron2 | on-going | - | [RFC patch 2327](https://patchwork.openvpn.net/patch/2327/) |
| Improve NM-OVPN integration | cron2 | trying to establish contact | - | - |
| Make TAP6-Windows Really Fast | lev | not started | - | - |
| SRV patch (set) | ? | patch needs work | - | - |
| Test server that does --auth-user-pass and/or challenge stuff | cron2 (snair) | --auth-user-pass done, challenge missing | - | - |
| Maybe: fix radius-plugin - plugin is useful but not maintained very well | ??? | ??? | - | - |
| Test framework improvements (local "make check" crypto tests) | syzzer | - | - | - |
| Inner VRF support? | ?? | ?? | ?? | - |
| Route monitoring (enable clients to react to network changes) | cron2 | not started | - | - |
| Maybe: add data channel separation (or, move to ovpn3, which already has this?) | ??? | ??? | - | - |
| Support TLS record splitting (like ovpn3) | syzzer | (started, but no patches available yet) | #554 | - |
| Improve control channel performance (further) - redo reliability layer, introduce windowing / scaling | syzzer | ??? | - | - |