Feature request: OpenVPN compression LZO and UDP

dynek · Wed Feb 24, 2016 10:49 pm

Seriously guys, don't you want to stop +1 ?

It has no effect, Mikrotik devs aren't counting how many people are incrementing an unexisting counter...

Thu Feb 25, 2016 12:27 am

Even the counter doesn't exist at all, it can be always easily risen by one in metavirtualized space. Isn't it wonderful?

cpliu903 · Thu Feb 25, 2016 10:37 am

which version will be include this new feature ??

spippan · Thu Feb 25, 2016 2:05 pm

please ... pleeease

for performance' sake ... implement UDP and compression in rOS OpenVPN

Chega · Wed Mar 02, 2016 10:04 pm

+1 for tls-auth
+1 LZO & UDP
Please.

WitekB · Thu Mar 03, 2016 11:22 pm

+10 for UDP

+0.5 for LZO/LZ4/Snappy which are supported by OpenVPN

eternal0 · Tue Mar 08, 2016 7:37 am

+1 for UDP.
TCP is much slower than UDP at high latency or high packet loss environment.

MTusewk · Tue Mar 08, 2016 8:33 am

+10 for UDP & LZO. It is a much needed feature.

berrigorri · Thu Mar 10, 2016 10:22 pm

+10

i need ten of my fifteen mikrotik routers connected to main site !! pleaseeee !!

darkprocess · Fri Mar 11, 2016 12:08 am

+1 please

UsernameMT · Fri Mar 11, 2016 3:46 pm

Please
+1 LZO and UDP

Zorro · Mon Mar 14, 2016 8:29 pm

resource consumption -wize - LZO isn't so great thing. not only in OpenVPN package.
but UDP is quite common feature and "expected" thing, yep. its only of things that actually make OpenVPN handy(compared to say SSTP or L2TP).

Sob · Mon Mar 14, 2016 11:04 pm

It depends on what you need. Enabling LZO on some weaker RB and expecting to push through many Mbits would not work well. But instead, you may need to access server using some very slow connection and then every saved byte is good. And don't forget client scenario, where you must accomodate to server config that you can't change.

The point is, RouterOS OpenVPN needs to support everything that official OpenVPN supports. If it doesn't, there will always be dissapointed users. Because if OpenVPN support is advertised, people usually don't expect it to be just part of it.

mrz · Fri Mar 18, 2016 2:44 am

THere will be UDP support in ROS v7.

UsernameMT · Fri Mar 18, 2016 3:42 pm

THere will be UDP support in ROS v7.

Hi.
In what month in 2016 year is planned to release ROS v7?

Swordforthelord · Fri Mar 18, 2016 6:26 pm

THere will be UDP support in ROS v7.

Thank you!

buzzdee · Sat Mar 19, 2016 12:48 pm

THere will be UDP support in ROS v7.

Finally. Thanks a lot!

mbecroft · Sat Mar 26, 2016 12:56 pm

For me this is a make or break feature. I cannot believe that for 10 years Mikrotik has not been able to do this. How many hundreds of users do you have that all have been asking for this, plus the thousands more who need it but haven't posted in any of the numerous forum threads on the topic.

GPL licensing should not be an issue since they are not linking with it. So they can use it as a process running within their proprietary environment, their only obligation under GPL being to make the source code of OpenVPN itself available, which simply means having a statement in the manual: Mikrotik software uses GPL source code, you can download it here -> point to OpenVPN official git repos.

Absolutely essential features for me and I think most users are:

UDP
LZO
TLS

OpenVPN has become the de-facto standard VPN for numerous environments for many reasons, because basically it has more features, wider support and is easier to configure than any of the proprietary VPN protocols, and does things IPsec just can't easily do, and does so with a fraction of the configuration difficulty.

How can even Ubiquiti of all vendors have this and yet Mikrotik cannot do it. Sorry to be blunt but this is insanity and total burying of head in the sand from Mikrotik. *Please* pull yourselves together and come up with a viable roadmap here. I really want to use your products but you are making it so hard...

P.S. the news that UDP support is coming in v7 is welcome, but what about LZO and preferably TLS> Without those it's still useless for many people. Remember if the server is configured to use LZO, you *have to use LZO*. And nobody is going to turn off LZO on their server just so I can connect my Mikrotik to it.

poizzon · Tue Mar 29, 2016 3:19 am

THere will be UDP support in ROS v7.
Hi.
In what month in 2016 year is planned to release ROS v7?

up to Christmas will be done !

the only question is to what year, of Christmas !

basic833 · Tue Apr 05, 2016 11:53 pm

Udp only ,what about lzo?And when?

basic833 · Wed Apr 06, 2016 12:03 am

Please add to openvpn this one!!!!->
UDP mode
LZO compression
TLS authentication
authentication without username/password

itmethod · Wed Apr 06, 2016 4:43 am

I Would like this as well. Most of the providers use lzo and udp.

7cigun · Tue May 24, 2016 11:26 am

+1, finger up
Mikrotik is good. But with OpenVPN+UDP it will be almost perfect.
Please.

Tue May 24, 2016 1:22 pm

Hi.
In what month in 2016 year is planned to release ROS v7?

When it's ready ?

Hopefully soon!

pkrexer · Mon May 30, 2016 5:36 am

I was sadden today when I went to setup an openvpn connection and couldn't figure out why things weren't working. Come to find out, lzo isn't supported! Seriously? Pretty much any vpn provider offering openvpn requires lzo compression.

So I can flash some crappy linksys or netgear router with dd-wrt / openwrt and have all the openvpn features, yet i can't with my mikrotik.... nice

I would like to keep my hopes up that proper support is coming...but judging by this thread, it doesn't seem promising.

oscar120584 · Mon May 30, 2016 12:00 pm

Please add to openvpn this one!!!!->
UDP mode
LZO compression
TLS authentication
authentication without username/password

+100500
Please add...

retali8 · Fri Jun 03, 2016 8:57 am

morze · Wed Jun 15, 2016 10:02 am

+1 LZO and UDP (I just bought the P10-Perpetual CHR key

, pleeeeeese

)

Paternot · Sun Jun 19, 2016 2:20 am

+1 for OpenVpn
UDP mode
LZO compression
TLS authentication
authentication without username/password
And pushing routes to clients

temesi · Tue Jun 21, 2016 12:49 am

+1 for udp + lzo + TLS

UsernameMT · Fri Jul 08, 2016 12:20 pm

THere will be UDP support in ROS v7.

You wrote - Fri Mar 18, 2016 3:44 am
.............................................
4 months later ....
When fantasy_ROSv7 appear (with UDP mode, LZO compression, TLS authentication, authentication without username/password) ?

I'll die of old age, and not waiting ROSv7?

Can i continue to buy Mikrotik RouterBOARD, in the hope that will fantasy_ROSv7?

Best regard for MikrotikTeam!

oscar120584 · Tue Jul 12, 2016 6:45 pm

THere will be UDP support in ROS v7.
You wrote - Fri Mar 18, 2016 3:44 am
.............................................
4 months later ....
When fantasy_ROSv7 appear (with UDP mode, LZO compression, TLS authentication, authentication without username/password) ?
I'll die of old age, and not waiting ROSv7?
Can i continue to buy Mikrotik RouterBOARD, in the hope that will fantasy_ROSv7?

Best regard for MikrotikTeam!

3 years already...
I'm sorry, but it looks like they do not care about the opinion of its customers. I do not buy more Mikrotik. I use OpenWRT for OVPN of customers.

mrz · Tue Jul 12, 2016 6:52 pm

Then why we decided to add UDP support?

dynek · Tue Jul 12, 2016 7:09 pm

I honestly do wonder what's so complicated about it... I mean implementation wise.

oscar120584 · Tue Jul 12, 2016 7:37 pm

Then why we decided to add UDP support?

When???????

spippan · Wed Jul 13, 2016 4:36 pm

Then why we decided to add UDP support?

is there any rOS7 RC or beta version available? i'd like to test OVPN with a RB2011 over LTE and another over a FTTH connection....

Paternot · Wed Jul 13, 2016 5:08 pm

is there any rOS7 RC or beta version available? i'd like to test OVPN with a RB2011 over LTE and another over a FTTH connection....

AFAIK it is in alfa stage - not even beta. So, no public access.

spippan · Fri Jul 15, 2016 6:48 pm

is there any rOS7 RC or beta version available? i'd like to test OVPN with a RB2011 over LTE and another over a FTTH connection....
AFAIK it is in alfa stage - not even beta. So, no public access.

too bad ... i'm doing a lot on ovpn testing and site-to-site infrastructures....

ChangzhouC · Sat Jul 16, 2016 6:32 pm

+1 for OpenVPN compression LZO and UDP

usmanov · Mon Aug 01, 2016 2:13 pm

+1 for OpenVPN udp + lzo + TLS

spyderspartan · Mon Aug 01, 2016 11:04 pm

Looking for udp + lzo + TLS support as well.

aquarat · Tue Aug 02, 2016 4:00 pm

I'm amazed ROS doesn't have udp + lzo support for OpenVPN client interfaces...

pe1chl · Tue Aug 02, 2016 4:13 pm

I don't think there is much point in adding +1 and "me too" messages to this thread.
The situation is clear: there is no LZO and UDP support, and it is not going to happen in v6.
It is promised to be solved in v7 but it is totally unclear when there will be a v7.
Could be next week, next month, next year, or 2020.
For now, no LZO and UDP for OpenVPN (and many other features promised for v7)

UsernameMT · Wed Aug 03, 2016 8:55 am

Could be next week, next month, next year, or 2020.

"next week" + 1

killersoft · Tue Aug 09, 2016 1:27 pm

+1 PLEASE MIKROTIK...

marosi · Wed Aug 10, 2016 12:00 pm

V7 will not be for free!

Unconfirmed informants told that RouterOS V7 will cost about 199$ for upgrade and 299$ for new installations in an anual subscription.

It will only work with SSL/TLS certificates generated by MT cloud services wich is another $49 per year.

Each VPN client need its own certificate to work properly. So 10 VPN users will be $490 per year and so on.

....just joking

UsernameMT · Wed Aug 10, 2016 12:37 pm

...

it possible or something similar, this explains the introduction of functions only in V7

I go buy a mini-ITX and install Ubuntu Server

pe1chl · Wed Aug 10, 2016 2:17 pm

I go buy a mini-ITX and install Ubuntu Server

That is certainly the quickest and probably the best way to get fully functional OpenVPN service.
In our network we use a Debian Linux server as a complicated VPN concentrator (many different protocols including OpenVPN)
and use MikroTik routers everywhere else. Although MikroTik is Linux-based it certainly cannot offer the
full flexibility of a manually configured Linux system. Of course, when you need only what it offers, it is
much easier to configure. And there is nice and cheap hardware.

marosi · Wed Aug 10, 2016 2:31 pm

Yes. I use the ipfire appliance for openvpn or ipsec setups. (IKEv2)
Tired waiting for mandatory features. Same with the CRS devices...

Garincho · Tue Aug 30, 2016 1:57 pm

+1 LZO & UDP

pe1chl · Tue Aug 30, 2016 3:54 pm

-1000 for people still replying +1 to this thread!