Changes between Version 5 and Version 6 of Compression
- Timestamp:
- 11/25/21 23:31:12 (2 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Compression
v5 v6 21 21 `TL;DR` OpenVPN are not removing compression but it must be made secure. You do not need it. 22 22 23 = Make Compression Secure23 == Make Compression Secure 24 24 25 25 Because only upstream packets are vulnerable to the VORACLE Attack, OpenVPN has implemented **Asynchronous Compression**. This means that only the Server sends compressed data to the Client. When the Client sends data to the Server, that data is not compressed and **not susceptible to VORACLE**. … … 34 34 - `yes` - Use this if you really do need compression AND you understand the risk you are taking. 35 35 36 `TL;DR` - **Update to OpenVPN 2.5** and remove `comp-lzo` and `compress` from all your configs. 36 == Bottom line 37 38 `TL;DR` 39 **Update to OpenVPN 2.5** and remove `comp-lzo` and `compress` from all your configs.[[br]]OpenVPN will do the rest for you, securely.