From patchwork Wed Jul 16 13:54:25 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gert Doering X-Patchwork-Id: 4310 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:d91b:b0:671:5a2c:6455 with SMTP id lg27csp179763mab; Wed, 16 Jul 2025 06:54:51 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCX76U6LKi9xHriOlPXtGoOZOatEDfiSkLLeWctbnmyHLIqm79hFn+XNvRlrOrCwcgUaAoGg8VCiRgM=@openvpn.net X-Google-Smtp-Source: AGHT+IEZZQjdWtfidu2DmgA6LAm1BpobPNAKmGhW25GQFlpsYbE8LXV1MgUQ7uhaUGDwC5rvXRdN X-Received: by 2002:a05:6808:d4a:b0:409:52f:b361 with SMTP id 5614622812f47-41ceb405866mr2313791b6e.0.1752674091621; Wed, 16 Jul 2025 06:54:51 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1752674091; cv=none; d=google.com; s=arc-20240605; b=F9gTV7NoDqO11Q364H2nLKI8OR1KAaJKTc+EVmFYwezRD0+V5i1YHkDTvCbsZgP+4v PyYU77i1Ct3xK1ptVja1F2jrwSTOuytw51VAO6CXdO4BziNmwyRmPaoKw/tvsiiqFeGT dW5neQlDYgQNhiE0GklCAR5dtzeEA5wufxxVgzhnY3g2VSx2M3aUKaK2MVY7+3aLqwK2 IN3p7Q/bdTSgXBIDuu1uAWXsCKxthnUiX9E4FLaybTVKiG3LW4felrMxLQOs6I/4sTjV k++UidsJZcJyiktxOJqRWBm0kPx8ij+NKJChdLmLUCRGVocto3SEKSgy8asOiYYs4ki0 tHfA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature; bh=zOzqLsn61ydQEwL3wyCAFGTKwtphMT0SF88y30rR+dc=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=IB5kO/9T0ZCc9nXw1uFrnh4ZVVkaploTlcOnuofWgu4X9E1vL66OwZ/sKIQLte0TBb ONHCWTlM39K1jjU6Ppsh3GNol3IgdRzAX+EcUTLbsJRzyRFbgSvvwxtZudfhm1xWgXmQ 8yKFLAElfmALPOQlRB6M6Gq4DYVEUvifZNRjE9KSuHbOjj9dbQEQV9Awrs+ayzAPw0OC aIfhpfluShOFN4Phb4cXw7liv8DAIphAfKWk5VlXVF6Q7A6byI7KKtHLCaFsDo+Lhmep 5ESs0n+JjAzgh7fwpEUeZvFKtNP24iGKe8bWtlRaBM8Uy5Vec9BiQH9gbNcqj5EOMDRa nCHQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=meLWRoX2; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=W2cq1biP; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=lwLYhHaD; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=muc.de Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 5614622812f47-41e080c13e4si6354b6e.70.2025.07.16.06.54.51 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Jul 2025 06:54:51 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=meLWRoX2; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=W2cq1biP; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=lwLYhHaD; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=muc.de DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:References:In-Reply-To:Message-ID:Date:To:From:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=zOzqLsn61ydQEwL3wyCAFGTKwtphMT0SF88y30rR+dc=; b=meLWRoX2H7DEcG/PwoWBav2/4W y1OfIRwq/JmTYSB0O3AG++q4RttNPRpt7jfmA52Zs0xTwtfld4xU9XvujDaWs3n0WV6I4yKnOcbFV KZoggGNKIsA5CCuakL2QbH+cJUhVfGo9Ag/bxgv0FXKzdoPpelvynNBoedVWYzKxDjvY=; Received: from [127.0.0.1] (helo=sfs-ml-3.v29.lw.sourceforge.com) by sfs-ml-3.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1uc2as-0006Kg-ED; Wed, 16 Jul 2025 13:54:46 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-3.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1uc2al-0006KW-4Z for openvpn-devel@lists.sourceforge.net; Wed, 16 Jul 2025 13:54:39 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=NfIS+pUjUNR+83fBmwu47nOZ/EHJ0HMYYpZal39Nmjw=; b=W2cq1biPATE1IrX/tWZhxc5N3R hkY1BbQ2a9FtQ101SLEztEqSlS6J/xCZIrr/pu8AAp+Sck7wqm4a3nqiTOKvqwu7Kt2504ZG503dN bCEbUcgzlo83R5feOCdeQynoyx9ANQa6vkvXZgWN7baA/+5ZFMx0zXBt+lbZzITnt/So=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID: Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=NfIS+pUjUNR+83fBmwu47nOZ/EHJ0HMYYpZal39Nmjw=; b=lwLYhHaD7qEAqE5zIZ0rFgaB8g ao/XxHRwU51LGhwy0a5x4rHpn9si/LMWz5eModJwYPFhBaaO0ruf74e0fWt9tgvefpUWrOFXgbixd gnvooIjQr2kxMIYUiCk49xfCJ6zaMfMM6dAvB3yTN+dOXbteoah5eqWWS/JVoewGKC6A=; Received: from [193.149.48.143] (helo=blue.greenie.muc.de) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1uc2ak-0002ux-0p for openvpn-devel@lists.sourceforge.net; Wed, 16 Jul 2025 13:54:39 +0000 Received: from blue.greenie.muc.de (localhost [127.0.0.1]) by blue.greenie.muc.de (8.17.1.9/8.17.1.9) with ESMTP id 56GDsV1Q023502 for ; Wed, 16 Jul 2025 15:54:31 +0200 Received: (from gert@localhost) by blue.greenie.muc.de (8.17.1.9/8.17.1.9/Submit) id 56GDsVP6023501 for openvpn-devel@lists.sourceforge.net; Wed, 16 Jul 2025 15:54:31 +0200 From: Gert Doering To: openvpn-devel@lists.sourceforge.net Date: Wed, 16 Jul 2025 15:54:25 +0200 Message-ID: <20250716135430.23484-1-gert@greenie.muc.de> X-Mailer: git-send-email 2.49.0 In-Reply-To: References: MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-2.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Antonio Quartulli Update the README.dco file by including instructions related to the new 'ovpn' linux kernel module. Change-Id: I22af9957b27785514d8c6d58fe4f2100d007fa5c Signed-off-by: Antonio Quartulli Acked-by: Frank Lichtenheld --- Content analysis details: (1.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Headers-End: 1uc2ak-0002ux-0p Subject: [Openvpn-devel] [PATCH v3] README.dco: update Linux instructions X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1837811988570409898?= X-GMAIL-MSGID: =?utf-8?q?1837811988570409898?= From: Antonio Quartulli Update the README.dco file by including instructions related to the new 'ovpn' linux kernel module. Change-Id: I22af9957b27785514d8c6d58fe4f2100d007fa5c Signed-off-by: Antonio Quartulli Acked-by: Frank Lichtenheld --- This change was reviewed on Gerrit and approved by at least one developer. I request to merge it to master. Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1087 This mail reflects revision 3 of this Change. Acked-by according to Gerrit (reflected above): Frank Lichtenheld diff --git a/README.dco.md b/README.dco.md index 3f7e00c..a93dc94 100644 --- a/README.dco.md +++ b/README.dco.md @@ -14,26 +14,22 @@ Getting started (Linux) ----------------------- -- Use a recent Linux kernel. Linux 5.4.0 and newer are known to work with - ovpn-dco. +The new DCO linux kernel module (namely `ovpn`) has been merged upstream +as of linux-6.16. From this kernel version onwards you directly get +the DCO module as shipped by your kernel. +NOTE: the new `ovpn` Linux kernel module is compatible only with OpenVPN +2.7 and greater. -Get the ovpn-dco module from one these urls and build it: +Alternatively, if you run an older kernel or if you want to use a more +recent DCO module than the one shipped by your kernel, you need to use +the ovpn-backports project. -* https://gitlab.com/openvpn/ovpn-dco -* https://github.com/OpenVPN/ovpn-dco +To learn how to use the ovpn-backports project and build your own DCO +kernel module, please refer to the README file available at: -e.g. + https://github.com/OpenVPN/ovpn-backports/blob/main/README.md - git clone https://github.com/OpenVPN/ovpn-dco - cd ovpn-dco - make - sudo make install - -If you want to report bugs please ensure to compile ovpn-dco with -`make DEBUG=1` and include any debug message being printed by the -kernel (you can view those messages with `dmesg`). - -Clone and build OpenVPN (or use OpenVPN 2.6+). For example: +Then clone and build OpenVPN (or use OpenVPN 2.7+). For example: git clone https://github.com/openvpn/openvpn.git cd openvpn @@ -48,8 +44,8 @@ data channel offloading, OpenVPN will automatically disable DCO support and warn the user. -Should OpenVPN be configured to use a feature that is not supported by ovpn-dco -or should the ovpn-dco kernel module not be available on the system, you will +Should OpenVPN be configured to use a feature that is not supported by ovpn +or should the ovpn kernel module not be available on the system, you will see a message like Note: Kernel support for ovpn-dco missing, disabling data channel offload. @@ -131,4 +127,3 @@ - `--persist-tun` not tested; - IPv6 mapped IPv4 addresses need Linux 5.4.189+/5.10.110+/5.12+ to work; - some incompatible options may not properly fallback to non-dco; -- no per client statistics. Only total statistics available on the interface.