Component: ovpn

7.21 Stable 2026-Jan-12 (1 month ago)

• fixed OVPN server handling on reboot (introduced in v7.20);
• improved system stability when using cipher=blowfish128;

7.20.7 Long-term 2026-Jan-08 (1 month ago)

• fixed OVPN server handling on reboot (introduced in v7.20);
• improved system stability when using cipher=blowfish128;

7.20 Stable 2025-Sep-29 (5 months ago)

• added support for sha384 hmac;
• improved tunnel setup speeds in configurations with large ammount of active OVPN clients;

7.19 Stable 2025-May-22 (9 months ago)

• properly match GCM hardware acceleration capabilities (introduced in v7.17);

7.18.1 Stable 2025-Feb-28 (1 year ago)

• disable hardware accelerator for GCM on MMIPS CPUs (introduced in v7.18);

7.18 Stable 2025-Feb-24 (1 year ago)

• added requirement for server name when exporting configuration;
• disable hardware accelerator for GCM on Alpine CPUs (introduced in v7.17);

7.17.1 Stable 2025-Jan-30 (1 year ago)

• added requirement for server name when exporting configuration;

7.17 Stable 2025-Jan-16 (1 year ago)

• added VRF support to OVPN server (server menu now supports multiple entries and previous server configuration is automatically imported);
• improved system stability;

7.16 Stable 2024-Sep-20 (1 year ago)

• improved system stability;

7.15 Stable 2024-May-29 (1 year ago)

• fixed import ovpn config when remote port is missing;
• fixed minor typo in error message;

7.14 Stable 2024-Feb-29 (2 years ago)

• added support for pushing routes;
• improved "push-routes" option handling when large amount of routes is specified;
• improved key-renegotiation process;
• improved OVPN configuration file import process;
• improved system stability when using HW encryption on ARM64 devices (introduced in v7.13);
• limit the maximum length for "push-routes" up to 1400 characters;

7.13.4 Stable 2024-Feb-07 (2 years ago)

• improved system stability when using HW encryption on ARM64 devices (introduced in v7.13);

7.13 Stable 2023-Dec-14 (2 years ago)

• improved memory allocation during key-renegotiation;
• removed "ping-timer-rem" option from client config file;

7.12 Stable 2023-Nov-09 (2 years ago)

• added "tls-auth" option support for imported .ovpn profiles;
• improved system stability;

7.11 Stable 2023-Aug-15 (2 years ago)

• do not try to use the "bridge" setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10);
• fixed OVPN server peer-id negotiation;
• fixed session-timeout when using UDP mode;
• improved key renegotiation process;
• include "connect-retry 1" and "reneg-sec" parameters into the OVPN configuration export file;
• properly close OVPN session on the server when client gets disconnected;

7.10.1 Stable 2023-Jun-27 (2 years ago)

• fixed OVPN server peer-id negotiation;

7.10 Stable 2023-Jun-15 (2 years ago)

• added initial support for V2 data transfer protocol;
• improved system stability;

7.9 Stable 2023-May-02 (2 years ago)

• added support for OVPN server configuration export and client configuration import from .ovpn file;
• improved system stability for Tile devices;

7.8 Stable 2023-Feb-24 (3 years ago)

• added AES-GCM and multicore encryption support;
• improved server stability;
• improved TLS-related error logging;

7.7 Stable 2023-Jan-12 (3 years ago)

• added "CBC" postfix to AES cipher names;
• added "route-nopull" option for client side;
• added hardware acceleration support for IPQ-6010;
• added support for IPv6 tunneling;
• fixed "Called-Station-Id" usage in RADIUS requests;

7.6 Stable 2022-Oct-17 (3 years ago)

• added IPv6 support;
• added VRF support for client;

7.5 Stable 2022-Aug-30 (3 years ago)

• fixed encryption key renewal process which caused periodic session disconnects;
• improved system stability when hardware acceleration is used on ARM64 devices;
• moved disconnected user logging message from "debug" to "info" topic;

7.4 Stable 2022-Jul-19 (3 years ago)

• added "AUTH_FAILED" control message sending;
• fixed "called-station-id" RADIUS attribute value for OVPN server;
• use selected cipher by default when the server does not provide "cipher" option;

7.3 Stable 2022-Jun-06 (3 years ago)

• adjusted SHA2 authentication algorithm naming to allow legacy OpenVPN implementations to connect;
• fixed hardware offloading support on CHR;
• fixed memory leak on TILE architecture;
• fixed packet processing on MT7621A;
• fixed server instance not responding to incoming connections after reboot on CHR;
• improved Windows client disconnect procedure in UDP mode;
• improved server stability under continous overload;
• improved service stability when outbound packets are blocked by firewall in UDP mode;
• improved service stability when processing frequent disconnects in UDP mode;
• improved stability when forwarding traffic on TILE;
• moved authentication failure messages to "info" logging level;
• reply with the same IP address that the connection was established to;

7.2.2 Stable 2022-Apr-28 (3 years ago)

• fixed memory leak on TILE architecture;
• fixed packet processing on MT7621A;
• improved Windows client disconnect procedure in UDP mode;
• improved service stability when processing frequent disconnects in UDP mode;
• improved stability when forwarding traffic on TILE;