OpenVPN DCO Looks Like It Might Be Ready For Linux 6.14 To Speed-Up VPN Performance

Written by Michael Larabel in Linux Networking on 4 December 2024 at 11:09 AM EST. 12 Comments
LINUX NETWORKING
In development for several years has been the OpenVPN DCO Linux kernel module for data channel offload (DCO) capabilities to provide for much faster virtual private networking (VPN) performance. It's looking like the lengthy review process on OpenVPN DCO is about wrapping up and leaving hope that it will be ready to premiere in next year's Linux 6.14 kernel.

The OpenVPN DCO kernel module allows leveraging data encryption backed by AES-NI in kernel space and to avoid context switching overhead from some of the OpenVPN code currently operating in user-space. Another performance boost comes by way of multi-threaded encryption support. The OpenVPN DCO kernel module handles the OpenVPN data channel in kernel-space and provides higher throughput and lower latency.

There have been some very nice performance gains shown for using the OpenVPN DCO kernel code:

OpenVPN DCO performance


Published this week was the v12 patches for the OpenVPN DCO code. Antonio Quartulli of OpenVPN kicked off the v12 patch series with:
"This is the 12th version of the patchset. Hopefully there are no major flaws that will require more resendings. I am sure we'll have plenty of time to polish up all bells and whistles :-)"

There are many fixes and code changes as a result of the code review process. There have been other indications on the LKML that it looks like OpenVPN DCO is wrapping up and about ready to cross the bridge to mainline, so here's to hoping it indeed wraps up in the next few weeks ahead of the Linux 6.14 kernel cycle in early 2025.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week
Logo

It looks like your ad blocker is on.

×

Ads are what make it possible to produce new content on Phoronix each and every day over the past 20 years.

Please support Phoronix by disabling your ad blocker.

Alternatively, you can join Phoronix Premium as an option for ad-free viewing, multi-page articles on a single page, native dark mode, and more benefits.

Join Phoronix Premium

Continue without supporting us

Choose your Ad Blocker

  • Adblock Plus
  • Adblock
  • Adguard
  • Ad Remover
  • Brave
  • Ghostery
  • uBlock Origin
  • uBlock
  • UltraBlock
  • Other
  1. In the extension bar, click the AdBlock Plus icon
  2. Click the large blue toggle for this website
  3. Click refresh
  1. In the extension bar, click the AdBlock icon
  2. Under "Pause on this site" click "Always"
  1. In the extension bar, click on the Adguard icon
  2. Click on the large green toggle for this website
  1. In the extension bar, click on the Ad Remover icon
  2. Click "Disable on This Website"
  1. In the extension bar, click on the orange lion icon
  2. Click the toggle on the top right, shifting from "Up" to "Down"
  1. In the extension bar, click on the Ghostery icon
  2. Click the "Anti-Tracking" shield so it says "Off"
  3. Click the "Ad-Blocking" stop sign so it says "Off"
  4. Refresh the page
  1. In the extension bar, click on the uBlock Origin icon
  2. Click on the big, blue power button
  3. Refresh the page
  1. In the extension bar, click on the uBlock icon
  2. Click on the big, blue power button
  3. Refresh the page
  1. In the extension bar, click on the UltraBlock icon
  2. Check the "Disable UltraBlock" checkbox
  3. Marque la casilla de verificación "Desactivar UltraBlock"
  1. Please disable your Ad Blocker

If the prompt is still appearing, please disable any tools or services you are using that block internet ads (e.g. DNS Servers).