ovpn-dco
ovpn-dco copied to clipboard
OpenVPN
OpenVPN Data Channel Offload in the linux kernel
The initialization hack for ovpn_tcp_prot doesn't work when the tcp_prot struct is constified (by Grsec/PaX, for instance) and is generally unsafe as it performs runtime function hooking/hijack to achieve its...
Together with Gert we have been stress testing OpenVPN+DCO on one of our eduVPN nodes. It has been running for approximately 18 hours serving 10000 connections, before this kernel crash...
If OpenVPN crashes instead of exiting orderly (for example after hitting the `--multihome --proto tcp` bug) the kernel side `tunX` interface is kept around. On OpenVPN restart, OpenVPN will just...
I attempted to build ovpn-dco with a kernel different to that running on my system (6.3.0). The README states: ``` If you want to build ovpn-dco against a kernel different...
This is a rather weird thing. It mostly happens if during startup of openvpn, the server is already bombarded with connections. The VM just hard freezes in this case. Not...
Sometimes on stopping openvpn, the interface deletion just "hangs": ``` 2023-01-04 13:53:04 us=622820 2003:d0:270b:a600:215:5dff:fe02:811a [gremlin404326] Peer Connection Initiated with [AF_INET6]2003:d0:270b:a600:215:5dff:fe02:811a:52901 2023-01-04 13:53:04 us=622827 2003:d0:270b:a600:215:5dff:fe02:811a dco_update_keys: peer_id=-1 2023-01-04 13:53:04 us=623416 gremlin404326/2003:d0:270b:a600:215:5dff:fe02:811a...
When passing the socket to kernelspace, userspace may had already started reading a new (but not complete!) packet. This means that now DCO will receive data which is not the...
* Clone kernel: `git clone https://git.kernel.org/pub/scm/linux/kernel.....` * Clone dco: `git clone https://github.com/OpenVPN/ovpn-dco -b master` * Copy `ovpn-dco-master/drivers/net/ovpn-dco` to kernel source code `/linux/drivers/net/ovpn-dco` * Copy contents of `ovpn-dco-master/drivers/net/Kconfig` to `/linux/drivers/net/Kconfig` *...
