Is there any chance that now that we have tls-auth support in OpenVPN client as of RouterOS v7.17 (big thanks for that), that we can get support for tls-auth on the server side as well? I know that WireGuard seems to be the preferred VPN server on RouterOS but I've got a few embedded devices that don't support it, and a couple of clients behind restrictive firewalls that need the flexibility OpenVPN supports to get around them. I know there were a lot of folks requesting this for OpenVPN client because a lot of OpenVPN services out there require it, and I think with good reason, the HMAC signature adds another layer of security and helps protect against DoS attacks, port scanning, etc., all things I'd love to have on my home VPN. Thanks.
I second this feature request.
Adding tls-cryptv2 to ovpn-server (as it was added to ovpn-client in ROS v7.17) would provide even greater security.
This would bring ROS at PAR to concurrent devices for OVPN needs.
Thanks in advance