OpenVPN 2.7.0-I017

OpenVPN, developed by OpenVPN Technologies Inc., stands as a robust and versatile solution in the realm of virtual private networks (VPNs). Renowned for its open-source nature, OpenVPN offers a high degree of flexibility, security, and reliability, making it a preferred choice for both individual users and enterprises seeking to safeguard their online activities and data.

At its core, OpenVPN employs a custom security protocol that leverages SSL/TLS for key exchange, ensuring that data transmitted through the VPN tunnel is encrypted and secure from prying eyes. This makes it an excellent tool for protecting sensitive information, whether you're accessing public Wi-Fi, managing remote workforces, or connecting to corporate networks.

One of the standout features of OpenVPN is its cross-platform compatibility. It supports a wide array of operating systems, including Windows, macOS, Linux, Android, and iOS, allowing users to maintain a secure connection across all their devices. Moreover, its open-source nature means that it benefits from continuous improvements and updates from a global community of developers, ensuring that it remains at the cutting edge of VPN technology.

OpenVPN's flexibility is further highlighted by its extensive configurability. Users can tailor the software to meet their specific needs, whether it's setting up site-to-site VPNs, remote access solutions, or integrating with third-party authentication systems. This level of customization is particularly valuable for IT professionals who need to implement complex network configurations.

Performance-wise, OpenVPN is known for its stability and efficiency. It can handle high levels of traffic without compromising on speed, thanks to its support for various encryption algorithms and compression techniques. This ensures that users can enjoy a seamless and fast internet experience while maintaining a high level of security.

Another significant advantage of OpenVPN is its strong community support. The active user base and comprehensive documentation provide a wealth of resources for troubleshooting, learning, and optimizing the software. This community-driven approach not only enhances the software's reliability but also fosters a collaborative environment where users can share insights and best practices.

In summary, OpenVPN by OpenVPN Technologies Inc. is a powerful, secure, and flexible VPN solution that caters to a wide range of users and use cases. Its open-source foundation, cross-platform support, and extensive configurability make it an invaluable tool for anyone looking to enhance their online privacy and security. Whether you're an individual seeking to protect your personal data or an enterprise aiming to secure your network infrastructure, OpenVPN offers a comprehensive and reliable solution.

Release notes:

New Release
Highlights of 2.7 include:
Multi-socket support for servers -- Handle multiple addresses/ports/protocols within one server
Improved Client support for DNS options
Client implementations for Linux/BSD/macOS, included with the default install
New client implementation for Windows, adding support for features like split DNS and DNSSEC
Architectural improvements on Windows"
The block-local flag is now enforced with WFP filters
Windows network adapters are now generated on demand
Windows automatic service now runs as an unpriviledged user
Support for server mode in win-dco driver
Note: Support for the wintun driver has been removed. win-dco is now the default, tap-windows6 is the fallback solution for use-cases not covered by win-dco.
Improved data channel:
Enforcement of AES-GCM usage limit
Epoch data keys and packet format
Support for new upstream DCO Linux kernel module:
This release supports the new ovpn DCO Linux kernel module which will be available in future upstream Linux kernel releases. Backports of the new module to current kernels are available via the ovpn-backports project.
Client-side support for new PUSH_UPDATE control-channel message:
This allows servers to send updates to options like routing and DNS config without triggering a reconnect.
PUSH_UPDATE server support (minimal):
New management interface commands push-update-broad and push-update-cid to send PUSH_UPDATE option updates.
TLS 1.3 support with bleeding-edge mbedTLS versions
Support for mbedTLS version 4
Two new environment variables have been introduced to communicate desired default gateway redirection to plugins like Network Manager.
Support for Epoch data channel on Windows, using the win-dco driver (2.8.0+)
"Recursive Routing" check is now more granular, and will only drop packets-in-tunnel if destination IP, protocol and port matches with those needed to reach the VPN server.
COPYING: license details only relevant to our Windows installers have been updated and moved to the
[ OpenVPN full changelog ]