Feature request: OpenVPN compression LZO and UDP

RyperX · Mon Sep 28, 2015 10:22 pm

Also still waiting for this 2 features

esorin0 · Mon Oct 12, 2015 11:50 pm

+1 UPD & LZO
+++++

cedon · Tue Oct 13, 2015 10:34 am

+1 from me for UDP and LZO... AND tls-auth (ta.key)

hrehm · Sun Oct 25, 2015 4:44 pm

+1 for openVPN UDP !!!

Siona · Sun Oct 25, 2015 7:42 pm

+1 udp zip

th0massin0 · Tue Oct 27, 2015 1:31 pm

+1 for UDP + LZO and tls-auth

BulliteShot · Tue Oct 27, 2015 8:03 pm

I have 20 Mikrotik routers... so...
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1
+1

Cmon guys

gangs · Wed Oct 28, 2015 3:13 pm

+1 !!!

elgrandiegote · Thu Oct 29, 2015 1:26 am

+1 for UDP + LZO and tls-auth

+10000000

Scormave · Tue Nov 03, 2015 3:02 pm

+1 UDP + LZO

ckleea · Wed Nov 04, 2015 12:39 am

Supported

SaeedYa · Sat Nov 07, 2015 12:53 pm

Come on Guys !!

+1

Siona · Sat Nov 07, 2015 3:37 pm

It is one of most missing future for soho routers from mikrotik.

fikt · Sat Nov 07, 2015 5:23 pm

Mikrotik,

there has been no other feature requested as mush as this OpenVPN compression LZO and UDP.

Any explanation why it is not implemented?

patrickmkt · Sun Nov 08, 2015 7:47 pm

Already voted on that years ago. And I'm still asking for it

GAS · Fri Nov 13, 2015 3:24 pm

+100500 for UDP and compression LZO

marcodefreitas · Sun Nov 15, 2015 3:31 am

@tierpath

From what I can see in the comparison table, both the OpenVPN and SoftEther VPN projects use GPL, meaning that any projects that use them must also be open sourced.

Since RouterOS is not an open source piece of software, I doubt MikroTik will ever integrate SoftEther VPN, just as they haven't integrated OpenVPN, but have instead made their own implementation of the OpenVPN protocol.

@Sob
If MikroTik could integrate an external package that has all of these features, then it means the same thing as every other dependency they have: They have less things to worry about afterwards, just like how they integrate OpenSSL, and thus only have to worry about keeping it updated.

Integration should be relatively easy from a technical standpoint (easier than implementing new features from scratch), but like I said, from a legal standpoint... No.

No. The only code that must be open-sourced is the code modified as is stated by GPL. MikroTik uses the GPL'ed code of Linus' kernel…

MikroTik@Linux.png

Sun Nov 15, 2015 4:24 am

No. The only code that must be open-sourced is the code modified as is stated by GPL. MikroTik uses the GPL'ed code of Linus' kernel…

You're right. In my defense, at the time of that post, I did not know those details, and in fact, until this more recent thread I just found out MikroTik includes GPL software.

kamaxeon · Thu Nov 19, 2015 2:16 am

+1 for udp and lzo

MikroTikFan · Mon Nov 23, 2015 11:34 pm

+1 for UDP

Why Mikrotik stuff is not taking into consideration customers votes ???
This times this is unique business strategy ...

rheo · Tue Nov 24, 2015 12:46 am

+1 would also like to see this

shodan · Tue Nov 24, 2015 8:24 pm

Yes! i want LZO and UDP too!
If you doing this, you soft be very cool!

MikroTikFan · Wed Nov 25, 2015 9:00 pm

+1 -- UDP
+1 -- LZO

Why Mikrotik stuff is not going to answer or make this happened since so many years ???

Customers votes are not important ???????????????????????????????????????

norlin · Mon Nov 30, 2015 10:07 am

+100500 for both options.

p.s. is this forum – the official way to make feature-requests??

norlin · Mon Nov 30, 2015 10:25 am

Mikrotik support answer (just now):

Thank you for the suggestion. We are already working on UDP OpenVPN in RouterOS v7

Nseven · Mon Nov 30, 2015 2:01 pm

This stops me from buying a MicroTik router. I hope these features will be available soon.

dynek · Mon Nov 30, 2015 9:12 pm

huuuuh if that's for sure this time I may want to finally buy a RB1100ahx2

No more need for MetaRouter.

Sob · Mon Nov 30, 2015 10:35 pm

I just hope they don't stop with UDP and add everything that standard OpenVPN can do. For example, pushing routes to clients is very nice feature too.

cpliu903 · Wed Dec 02, 2015 6:22 am

+1

UDP very very very important.

MasterXP · Wed Dec 02, 2015 7:15 am

+1 for UDP
+1 for Compression
+1 for Pushing Routes

blacksd · Wed Dec 02, 2015 10:27 am

Subscribed to this forum to add my +1.

I'd be more than happy to ditch Cisco for Mikrotik, but - even after the base course and certification - I'm not convinced. OpenVPN is *way* too important to be simply overlooked "by more interesting VPN solutions" (their words). I'm not a bunker, but this smells a lot of "hey we made a deal with Microsoft to let out OpenVPN from our platform".

Siona · Wed Dec 02, 2015 5:21 pm

O yes!
Pushing routes! I'd really like to see it in ROS!

wasbak · Thu Dec 03, 2015 3:53 pm

+1 udp + routes + lzo

websun · Thu Dec 10, 2015 10:29 pm

+1

Cmon guys these are basic 15 year old router functions.

onlineuser · Fri Dec 11, 2015 6:29 pm

+1

Yes, come on, please add UDP and compression!

MikroTikFan · Sun Dec 13, 2015 1:32 pm

Mikrotik support answer (just now):
Thank you for the suggestion. We are already working on UDP OpenVPN in RouterOS v7

May I ask Mikrotik Support when this will be launched to production and announced to all Mikrotik community?

DJGlooM · Fri Dec 18, 2015 5:24 pm

Need
Openvpn UDP
NOW!

Stop feeding promises, leave everything else and just do it!

How the hell should we make stable and secure long-distance tonnels with TCP? Meltdown ruins it all.
GRE is inconvinient and not supported with mobile clients, PPTP is unsecure, L2TP+IpSec is old and again, not well-supported for mobile clients.

MikroTikFan · Tue Dec 22, 2015 9:27 pm

Mikrotik Support - can you share witch this community date when Mikrotik Team is going to launch RouterOS v7 ?

gidden · Tue Dec 29, 2015 3:32 pm

tls-auth + LZO
+1
+1
+1
(I have 3 Mikrotik routers)

msatter · Sun Jan 10, 2016 1:59 am

+1 for OpenVPN with UDP

aigarslv · Mon Jan 11, 2016 3:15 pm

Please don't forget OpenVPN TLS authentication. As OpenVPN is becoming one of major players.

tapsa · Mon Jan 18, 2016 4:40 pm

+1 for udp tunnel with static key
This is really show stopper that you need another device to make openvpn p to p tunnels. Currently if you need real l2 tunnel without any ip there is no good way to do it.

th0massin0 · Sun Jan 24, 2016 1:48 pm

Dear Mikrotik Support and Developers Staff
In context of governmental changes in Poland and dramatic changes in Act of Police (known as “Invigilation Act”) I will ask one more time, please give us OpenVPN in UDP with compression and TLS. We have many RouterBoards already and if you will make OpenVPN works in proper way, we will definitely buy more.

andryan · Mon Jan 25, 2016 9:30 am

+1 for LZO compression, UDP support, no user-pass authentication option

kamaxeon · Wed Jan 27, 2016 4:50 pm

I can't wait more time, bye bye Mikrotik ....

haloman · Sun Feb 14, 2016 6:19 pm

+1000 for LZO & UDP

Janhouse · Wed Feb 17, 2016 12:37 am

+1 UDP

Chega · Tue Feb 23, 2016 12:11 am

+1 UDP and LZO

RyperX · Tue Feb 23, 2016 7:57 pm

+1 LZO & UDP

iGz · Wed Feb 24, 2016 3:58 pm

+1 for tls-auth
+1 LZO & UDP

dynek · Wed Feb 24, 2016 10:49 pm

Seriously guys, don't you want to stop +1 ?

It has no effect, Mikrotik devs aren't counting how many people are incrementing an unexisting counter...

Thu Feb 25, 2016 12:27 am

Even the counter doesn't exist at all, it can be always easily risen by one in metavirtualized space. Isn't it wonderful?

cpliu903 · Thu Feb 25, 2016 10:37 am

which version will be include this new feature ??

spippan · Thu Feb 25, 2016 2:05 pm

please ... pleeease

for performance' sake ... implement UDP and compression in rOS OpenVPN

Chega · Wed Mar 02, 2016 10:04 pm

+1 for tls-auth
+1 LZO & UDP
Please.

WitekB · Thu Mar 03, 2016 11:22 pm

+10 for UDP

+0.5 for LZO/LZ4/Snappy which are supported by OpenVPN

eternal0 · Tue Mar 08, 2016 7:37 am

+1 for UDP.
TCP is much slower than UDP at high latency or high packet loss environment.

MTusewk · Tue Mar 08, 2016 8:33 am

+10 for UDP & LZO. It is a much needed feature.

berrigorri · Thu Mar 10, 2016 10:22 pm

+10

i need ten of my fifteen mikrotik routers connected to main site !! pleaseeee !!

darkprocess · Fri Mar 11, 2016 12:08 am

+1 please

UsernameMT · Fri Mar 11, 2016 3:46 pm

Please
+1 LZO and UDP

Zorro · Mon Mar 14, 2016 8:29 pm

resource consumption -wize - LZO isn't so great thing. not only in OpenVPN package.
but UDP is quite common feature and "expected" thing, yep. its only of things that actually make OpenVPN handy(compared to say SSTP or L2TP).

Sob · Mon Mar 14, 2016 11:04 pm

It depends on what you need. Enabling LZO on some weaker RB and expecting to push through many Mbits would not work well. But instead, you may need to access server using some very slow connection and then every saved byte is good. And don't forget client scenario, where you must accomodate to server config that you can't change.

The point is, RouterOS OpenVPN needs to support everything that official OpenVPN supports. If it doesn't, there will always be dissapointed users. Because if OpenVPN support is advertised, people usually don't expect it to be just part of it.

Fri Mar 18, 2016 2:44 am

THere will be UDP support in ROS v7.

UsernameMT · Fri Mar 18, 2016 3:42 pm

THere will be UDP support in ROS v7.

Hi.
In what month in 2016 year is planned to release ROS v7?

Swordforthelord · Fri Mar 18, 2016 6:26 pm

THere will be UDP support in ROS v7.

Thank you!

buzzdee · Sat Mar 19, 2016 12:48 pm

THere will be UDP support in ROS v7.

Finally. Thanks a lot!

mbecroft · Sat Mar 26, 2016 12:56 pm

For me this is a make or break feature. I cannot believe that for 10 years Mikrotik has not been able to do this. How many hundreds of users do you have that all have been asking for this, plus the thousands more who need it but haven't posted in any of the numerous forum threads on the topic.

GPL licensing should not be an issue since they are not linking with it. So they can use it as a process running within their proprietary environment, their only obligation under GPL being to make the source code of OpenVPN itself available, which simply means having a statement in the manual: Mikrotik software uses GPL source code, you can download it here -> point to OpenVPN official git repos.

Absolutely essential features for me and I think most users are:

UDP
LZO
TLS

OpenVPN has become the de-facto standard VPN for numerous environments for many reasons, because basically it has more features, wider support and is easier to configure than any of the proprietary VPN protocols, and does things IPsec just can't easily do, and does so with a fraction of the configuration difficulty.

How can even Ubiquiti of all vendors have this and yet Mikrotik cannot do it. Sorry to be blunt but this is insanity and total burying of head in the sand from Mikrotik. *Please* pull yourselves together and come up with a viable roadmap here. I really want to use your products but you are making it so hard...

P.S. the news that UDP support is coming in v7 is welcome, but what about LZO and preferably TLS> Without those it's still useless for many people. Remember if the server is configured to use LZO, you *have to use LZO*. And nobody is going to turn off LZO on their server just so I can connect my Mikrotik to it.

poizzon · Tue Mar 29, 2016 3:19 am

THere will be UDP support in ROS v7.
Hi.
In what month in 2016 year is planned to release ROS v7?

up to Christmas will be done !

the only question is to what year, of Christmas !

basic833 · Tue Apr 05, 2016 11:53 pm

Udp only ,what about lzo?And when?

basic833 · Wed Apr 06, 2016 12:03 am

Please add to openvpn this one!!!!->
UDP mode
LZO compression
TLS authentication
authentication without username/password

itmethod · Wed Apr 06, 2016 4:43 am

I Would like this as well. Most of the providers use lzo and udp.

7cigun · Tue May 24, 2016 11:26 am

+1, finger up
Mikrotik is good. But with OpenVPN+UDP it will be almost perfect.
Please.

Tue May 24, 2016 1:22 pm

Hi.
In what month in 2016 year is planned to release ROS v7?

When it's ready ?

Hopefully soon!

pkrexer · Mon May 30, 2016 5:36 am

I was sadden today when I went to setup an openvpn connection and couldn't figure out why things weren't working. Come to find out, lzo isn't supported! Seriously? Pretty much any vpn provider offering openvpn requires lzo compression.

So I can flash some crappy linksys or netgear router with dd-wrt / openwrt and have all the openvpn features, yet i can't with my mikrotik.... nice

I would like to keep my hopes up that proper support is coming...but judging by this thread, it doesn't seem promising.

oscar120584 · Mon May 30, 2016 12:00 pm

Please add to openvpn this one!!!!->
UDP mode
LZO compression
TLS authentication
authentication without username/password

+100500
Please add...

retali8 · Fri Jun 03, 2016 8:57 am

morze · Wed Jun 15, 2016 10:02 am

+1 LZO and UDP (I just bought the P10-Perpetual CHR key

, pleeeeeese

)

Paternot · Sun Jun 19, 2016 2:20 am

+1 for OpenVpn
UDP mode
LZO compression
TLS authentication
authentication without username/password
And pushing routes to clients

temesi · Tue Jun 21, 2016 12:49 am

+1 for udp + lzo + TLS

UsernameMT · Fri Jul 08, 2016 12:20 pm

THere will be UDP support in ROS v7.

You wrote - Fri Mar 18, 2016 3:44 am
.............................................
4 months later ....
When fantasy_ROSv7 appear (with UDP mode, LZO compression, TLS authentication, authentication without username/password) ?

I'll die of old age, and not waiting ROSv7?

Can i continue to buy Mikrotik RouterBOARD, in the hope that will fantasy_ROSv7?

Best regard for MikrotikTeam!

oscar120584 · Tue Jul 12, 2016 6:45 pm

THere will be UDP support in ROS v7.
You wrote - Fri Mar 18, 2016 3:44 am
.............................................
4 months later ....
When fantasy_ROSv7 appear (with UDP mode, LZO compression, TLS authentication, authentication without username/password) ?
I'll die of old age, and not waiting ROSv7?
Can i continue to buy Mikrotik RouterBOARD, in the hope that will fantasy_ROSv7?

Best regard for MikrotikTeam!

3 years already...
I'm sorry, but it looks like they do not care about the opinion of its customers. I do not buy more Mikrotik. I use OpenWRT for OVPN of customers.

Tue Jul 12, 2016 6:52 pm

Then why we decided to add UDP support?

dynek · Tue Jul 12, 2016 7:09 pm

I honestly do wonder what's so complicated about it... I mean implementation wise.

oscar120584 · Tue Jul 12, 2016 7:37 pm

Then why we decided to add UDP support?

When???????

spippan · Wed Jul 13, 2016 4:36 pm

Then why we decided to add UDP support?

is there any rOS7 RC or beta version available? i'd like to test OVPN with a RB2011 over LTE and another over a FTTH connection....

Paternot · Wed Jul 13, 2016 5:08 pm

is there any rOS7 RC or beta version available? i'd like to test OVPN with a RB2011 over LTE and another over a FTTH connection....

AFAIK it is in alfa stage - not even beta. So, no public access.

spippan · Fri Jul 15, 2016 6:48 pm

is there any rOS7 RC or beta version available? i'd like to test OVPN with a RB2011 over LTE and another over a FTTH connection....
AFAIK it is in alfa stage - not even beta. So, no public access.

too bad ... i'm doing a lot on ovpn testing and site-to-site infrastructures....

ChangzhouC · Sat Jul 16, 2016 6:32 pm

+1 for OpenVPN compression LZO and UDP

usmanov · Mon Aug 01, 2016 2:13 pm

+1 for OpenVPN udp + lzo + TLS

spyderspartan · Mon Aug 01, 2016 11:04 pm

Looking for udp + lzo + TLS support as well.

aquarat · Tue Aug 02, 2016 4:00 pm

I'm amazed ROS doesn't have udp + lzo support for OpenVPN client interfaces...

pe1chl · Tue Aug 02, 2016 4:13 pm

I don't think there is much point in adding +1 and "me too" messages to this thread.
The situation is clear: there is no LZO and UDP support, and it is not going to happen in v6.
It is promised to be solved in v7 but it is totally unclear when there will be a v7.
Could be next week, next month, next year, or 2020.
For now, no LZO and UDP for OpenVPN (and many other features promised for v7)

UsernameMT · Wed Aug 03, 2016 8:55 am

Could be next week, next month, next year, or 2020.

"next week" + 1

killersoft · Tue Aug 09, 2016 1:27 pm

+1 PLEASE MIKROTIK...

marosi · Wed Aug 10, 2016 12:00 pm

V7 will not be for free!

Unconfirmed informants told that RouterOS V7 will cost about 199$ for upgrade and 299$ for new installations in an anual subscription.

It will only work with SSL/TLS certificates generated by MT cloud services wich is another $49 per year.

Each VPN client need its own certificate to work properly. So 10 VPN users will be $490 per year and so on.

....just joking

UsernameMT · Wed Aug 10, 2016 12:37 pm

...

it possible or something similar, this explains the introduction of functions only in V7

I go buy a mini-ITX and install Ubuntu Server

pe1chl · Wed Aug 10, 2016 2:17 pm

I go buy a mini-ITX and install Ubuntu Server

That is certainly the quickest and probably the best way to get fully functional OpenVPN service.
In our network we use a Debian Linux server as a complicated VPN concentrator (many different protocols including OpenVPN)
and use MikroTik routers everywhere else. Although MikroTik is Linux-based it certainly cannot offer the
full flexibility of a manually configured Linux system. Of course, when you need only what it offers, it is
much easier to configure. And there is nice and cheap hardware.

marosi · Wed Aug 10, 2016 2:31 pm

Yes. I use the ipfire appliance for openvpn or ipsec setups. (IKEv2)
Tired waiting for mandatory features. Same with the CRS devices...

Garincho · Tue Aug 30, 2016 1:57 pm

+1 LZO & UDP

pe1chl · Tue Aug 30, 2016 3:54 pm

-1000 for people still replying +1 to this thread!

Who is online