ojab/openvpn3

( forked from dsommers/openvpn3 )

Project ID: 99312

Description

OpenVPN 3 based client for Linux, built with modern Linux distributions in mind. OpenVPN 3 clients are mostly compatible with OpenVPN 2, but there are some features not yet present - like TAP device support and several other and lesser used features. If your configuration works with the OpenVPN Connect Android and iOS app, it will most likely function quite well as this client uses the same OpenVPN 3 Core Library as OpenVPN Connect.

UPDATE v11_beta was released November 2nd, 2020 - this release includes a tech-preview of a kernel based OpenVPN module

Installation Instructions

The easiest install method is to ensure the yum/dnf copr plug-in is installed. Then you can do:

# yum copr enable dsommers/openvpn3
# yum install openvpn3-client

Once installed, there are two programs which any user on the system can use to start and manage OpenVPN tunnels. openvpn2 provides a simple command line client which tries to behave more like the traditional openvpn command line version.

$ openvpn2 --config my-vpn-config.conf --verb 6

If your VPN configuration does not contain --daemon, the log will appear in the console and the connection can be torn down via CTRL-C. To take advantage of the more advanced features look at theopenvpn3command line tool. Both openvpn2 and openvpn3 provides a fairly informative --help feature, in addition to man pages. The generic openvpn3-linux information can be found in the openvpn3-linux(7) man page.

Logging

Logging is by default being sent to syslog. The verbosity level can be adjusted via the openvpn3-admin log-service command, which must be run as root. Log entries will be found in either /var/log/messages or journalctl -u dbus. In addition each user starting VPN tunnels can also use the openvpn3 log feature to retrieve log data for a specific tunnel, without going via the the system log.

Quick-start guide:

A slightly more informative "getting started" guide can be found here: https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux#Quickstart-howtouseOpenVPN3Linux

OpenVPN Data Channel Offload support (Fedora only, tech preview feature)

As of v11_beta, data channel offload (DCO) via a kernel module is now available as tech-preview. This is currently only available for Fedora via this repository.

To enable it, first install the ovpn-dco kernel module:

# yum install kmod-ovpn-dco

Then you must pre-import the configuration profile and activate the DCO mode on that config

$ openvpn3 config-import --config CLIENT_CONFIG --name CONFIG_NAME --persistent
$ openvpn3 config-manage --show --config CONFIG_NAME --dco true

Now you can start the connection, with DCO active:

$ openvpn3 session-start --config CONFIG_NAME

Active Releases

The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).

Release	Architectures	Repo Download
EPEL 7	ppc64le (16), x86_64 (30)	EPEL 7 (36 downloads)
EPEL 8	aarch64 (39), ppc64le (103), s390x (92), x86_64 (83)	EPEL 8 (38 downloads)
EPEL 9	aarch64 (48), ppc64le (82), s390x (78), x86_64 (52)	EPEL 9 (34 downloads)
Fedora 39	aarch64 (60), ppc64le (38), s390x (43), x86_64 (2650)	Fedora 39 (378 downloads)
Fedora 40	aarch64 (22), ppc64le (12), s390x (12), x86_64 (1176)	Fedora 40 (293 downloads)
Fedora 41	aarch64 (7), ppc64le (21), s390x (25), x86_64 (33)	Fedora 41 (37 downloads)
Fedora rawhide	aarch64 (28), ppc64le (34), s390x (30), x86_64 (31)	Fedora rawhide (83 downloads)