Community discussions

 
normanr
just joined
Topic Author
Posts: 5
Joined: Thu Sep 04, 2008 4:46 pm

Feature Request: OpenVPN [ovpn] udp tunnels

Thu Sep 11, 2008 4:08 pm

It's a long standing request, and shouldn't be a lot of work.
 
darkwarrior
just joined
Posts: 18
Joined: Wed Aug 15, 2007 4:40 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Oct 07, 2008 5:42 pm

i'm need this feature too.
 
Eter
just joined
Posts: 11
Joined: Sun Oct 12, 2008 11:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun Oct 12, 2008 11:53 pm

Anyone knows anything about this? Will udp support be included in upcoming releases?

Maybe some from Mikrotik can tell us?

Chris
 
netrat
Member
Member
Posts: 403
Joined: Thu Jun 07, 2007 1:16 pm
Location: Virginia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jan 20, 2010 10:08 pm

Bump... Can we please get an update on UDP support for OpenVPN? TCP over TCP simply does not work. Normis or Uldis an update please?
 
cdiggity
newbie
Posts: 31
Joined: Fri Oct 31, 2008 12:40 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jan 22, 2010 2:15 am

I'm waiting for this as well.
 
Pada
Member Candidate
Member Candidate
Posts: 150
Joined: Tue Dec 08, 2009 11:37 pm
Location: South Africa, Stellenbosch

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jan 25, 2010 12:31 am

I would've loved it to be able to use a standard OpenVPN configuration file.

The drawbacks with the current OpenVPN server/client are:
* No UDP support
* Unable to host a server without a username/password combination
* Unable to push routes to clients
 
leonset
Member Candidate
Member Candidate
Posts: 256
Joined: Wed Apr 01, 2009 9:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Feb 01, 2010 6:26 pm

+1!!!

I really need this feature. Using TCP to encapsulate TCP gives me a very low throughput... and it's a shame, because it's really easy to set up an OpenVPN tunnel (well, at least when you've done it ten times and you discover how RouterOS like's it's certs and some other tricky detalis).

Mikrotik, what's holding you from implementing UDP for OpenVPN? At least it would be nice to know why it is taking so long...

Thank you!
 
phii
just joined
Posts: 2
Joined: Sat Feb 06, 2010 2:37 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Feb 06, 2010 2:40 pm

+1 on this.

I have a few tunnels setup, and as they all have dynamic client side IP's I basically have no choice but to use OpenVPN.

Which means I have to use TCP mode and the performance is poor.

Do you need people to test this? Is there beta/alpha code? Is it just as simple as not that many people need it?

Help!

Daniel
 
phii
just joined
Posts: 2
Joined: Sat Feb 06, 2010 2:37 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Feb 06, 2010 3:05 pm

I really need this feature too! Stuck using OpenVPN due to dynamic IP's on client locations/sites.

Will we get this soon?
 
leonset
Member Candidate
Member Candidate
Posts: 256
Joined: Wed Apr 01, 2009 9:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Feb 08, 2010 10:47 am

I think it would be nice to add your vote here:

http://wiki.mikrotik.com/wiki/MikroTik_ ... e_Requests

Probably someone should add all the votes from the v3 feature requests page which are not done yet:

http://wiki.mikrotik.com/wiki/MikroTik_ ... e_Requests

Regards
 
User avatar
omidkosari
Trainer
Trainer
Posts: 613
Joined: Fri Sep 01, 2006 4:18 pm
Location: Iran , Karaj
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Feb 09, 2010 7:38 pm

I need it very much . a mikrotik guy comment please ?
When will support udp ?
 
User avatar
calman
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Fri Feb 06, 2009 12:16 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Feb 09, 2010 11:50 pm

Udp i faster than tcp , but more dificult to bound than tcp
 
netrat
Member
Member
Posts: 403
Joined: Thu Jun 07, 2007 1:16 pm
Location: Virginia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Feb 10, 2010 5:02 pm

Udp i faster than tcp , but more dificult to bound than tcp

What?
 
User avatar
jp
Long time Member
Long time Member
Posts: 599
Joined: Wed Mar 02, 2005 5:06 am
Location: Maine
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Feb 12, 2010 10:25 pm

I run OpenVPN on a separate linux box, and it rocks. Performance, features, multiplatfom ease of use are quite good.
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 714
Joined: Tue Aug 25, 2009 12:01 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Feb 18, 2010 5:55 am

Im currently at 72 Ovpn tunnels and would REALLY like full ovpn support. LZO compression, UDP support, etc.

Ill be at over 100 Ovpn tunnels in about a month, all with MT hardware. Please Please Please!
 
leonset
Member Candidate
Member Candidate
Posts: 256
Joined: Wed Apr 01, 2009 9:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Feb 18, 2010 9:29 am

Hi,

@roadracer96 Have you been able to measure the bandwidth that you are loosing by using tcp instead of the native bandwidth of your link? In my tests I loose at least 50% of the links native bandwidth (and there aren't any lost packets nor high latency).

@everyone Has someone played with MTU's to try to increase the OpenVPN links performance?

Thank you!
 
User avatar
omidkosari
Trainer
Trainer
Posts: 613
Joined: Fri Sep 01, 2006 4:18 pm
Location: Iran , Karaj
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Feb 18, 2010 11:38 am

Is there any comparison between OpenVPN vs EOIP ?
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 714
Joined: Tue Aug 25, 2009 12:01 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Feb 18, 2010 2:39 pm

The tunnels are fast and I dont think I am losing a lot of bandwidth. One tunnel was pushing about 5mbit for 3 days straight doing DFS replication to my office from a colocation and the speed on the LAN side of the tunnel was about the same. But this was over a wire, not over wireless, so full duplex, etc, etc.

BUT. UDP is less expensive in pretty much every aspect.

EDIT: OpenVPN is an encrypted, certificate based VPN. EOIP is not. No comparison...
 
Pada
Member Candidate
Member Candidate
Posts: 150
Joined: Tue Dec 08, 2009 11:37 pm
Location: South Africa, Stellenbosch

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Feb 18, 2010 4:35 pm

I was always using OpenVPN on my Linksys WRT54GL with DD-WRT firmware, which allowed me to open PPPoE client connections via the OpenVPN tunnel. Since I got a RB750, I've changed over to PPTP VPN, which doesn't allow me to open PPPoE connections over the VPN tunnel.

I've used the TCP based OpenVPN connection over a Wireless network, and the throughput was reasonably decent, considering the TCP overhead.

I would really be grateful if OpenVPN features would be expanded in ROS...
 
duoran
just joined
Posts: 5
Joined: Sun Feb 14, 2010 3:24 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Feb 19, 2010 2:23 am

Vote +1
 
User avatar
omidkosari
Trainer
Trainer
Posts: 613
Joined: Fri Sep 01, 2006 4:18 pm
Location: Iran , Karaj
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Feb 19, 2010 10:40 am

EDIT: OpenVPN is an encrypted, certificate based VPN. EOIP is not. No comparison...
I mean a comparison in performance,overhead,reliability etc between EOIP and OpenVPN
 
netrat
Member
Member
Posts: 403
Joined: Thu Jun 07, 2007 1:16 pm
Location: Virginia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Feb 19, 2010 3:45 pm


I mean a comparison in performance,overhead,reliability etc between EOIP and OpenVPN
EoIP will perform faster. For one EoIP is just using a plain GRE tunnel with a few Mikrotik added extensions and OpenVPN is an encrypted tunnel. Obviously EoIP will be faster. Currently reliability would be greater with EoIP as the Mikrotik implementation of OpenVPN only supports TCP which is problematic when running TCP over TCP.
 
pantone
just joined
Posts: 7
Joined: Tue Mar 16, 2010 4:18 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Apr 08, 2010 5:46 am

+1..

The performance of OpenVPN TCP is too bad... why MikroTik don't add UDP feature? Why can't see any official staff reply this issue? Please stand out here and tell us there any schedule or difficult? ;-)

Thanks.
 
dssmiktik
Forum Veteran
Forum Veteran
Posts: 732
Joined: Fri Aug 17, 2007 8:42 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Apr 08, 2010 2:01 pm

I must say I agree. We've never heard a definitive answer on this issue. Question: Why? So simple, yet no answer.

Has anyone seen an OpenVPN solution on any device support only TCP? Please respond if you could, anyone, I'm really curious. I'm wondering what's the difficulty in adding UDP support.

Anyway, please anyone respond, this is getting very old, and yes, very frustrating.
 
workie
just joined
Posts: 7
Joined: Wed Oct 14, 2009 11:45 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Apr 13, 2010 11:09 am

...
Anyway, please anyone respond, this is getting very old, and yes, very frustrating.
+1, we need answer to this question. It may or may not easy to implement this feature, but OpenVPN (the original one) has both TCP and UDP support, it's incomplete implementation right now. We need the UDP and LZO compression too. Please, just say a date eg. 2011. July and we'll wait for it, but now we don't have any info.
 
pantone
just joined
Posts: 7
Joined: Tue Mar 16, 2010 4:18 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 03, 2010 10:50 am

vote +1

OpenVPN support UDP is too important!!!!!!
 
hedele
Member
Member
Posts: 335
Joined: Tue Feb 24, 2009 11:23 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Jun 05, 2010 9:51 am

I think the official opinion on this is "Why do you need that, if you want UDP based tunneling use L2TP"

To be honest, L2TP does work rather nicely :)
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jun 07, 2010 9:58 am

We also have SSTP now, which works great and has the same benefits as OpenVPN. It's currently not popular yet, and (except RouterOS) it's supported only in Windows, but technically it's very interesting.
No answer to your question? How to write posts
 
hedele
Member
Member
Posts: 335
Joined: Tue Feb 24, 2009 11:23 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jun 07, 2010 7:03 pm

Isn't SSTP also TCP-based and suffers from the TCP-meltdown problem?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Jun 08, 2010 8:42 am

Practically (i am on a SSTP tunnel all the time now, for testing), I couldn't say there is a performance difference with or without the tunnel. Local network file transfers are just as fast.
No answer to your question? How to write posts
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 714
Joined: Tue Aug 25, 2009 12:01 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 7:54 am

We also have SSTP now, which works great and has the same benefits as OpenVPN. It's currently not popular yet, and (except RouterOS) it's supported only in Windows, but technically it's very interesting.

SSTP does NOT work great... Tried it in 5b1 and 5b2 and it still has a long way to go.... IIRC, it disconnects every 2 minutes. There is some workaround on the client-side, but hacks arent really feasible for me with over 100 MT->MT VPN tunnels.
To be honest, L2TP does work rather nicely :)
I think the official opinion on this is "Why do you need that, if you want UDP based tunneling use L2TP"

To be honest, L2TP does work rather nicely :)
Yeah, except IPSEC is severely lacking... So again, you are left with MPPE-128 instead of 192/256bit certificate VPNs... There are many applications where there is a legal, or procedural requirement to use certificates.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:00 am

Maybe the difference is that I use beta3 ?
No answer to your question? How to write posts
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 714
Joined: Tue Aug 25, 2009 12:01 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:09 am

Maybe the difference is that I use beta3 ?
Gimme!
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:18 am

We are about to release, it has numerous important fixes and improvements.
No answer to your question? How to write posts
 
void
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Fri Nov 07, 2008 5:28 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:20 am

Why is Mikrotik ignoring all those request for UDP based OpenVPN and proposing and TCP VPN solution as an alternative ?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:24 am

Why is Mikrotik ignoring all those request for UDP based OpenVPN and proposing and TCP VPN solution as an alternative ?
OpenVPN is very very buggy and hard to implement. Our developers almost all committed suicide trying to make it work. It's a big mess, so we can't continue to implement it 100%
No answer to your question? How to write posts
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 714
Joined: Tue Aug 25, 2009 12:01 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:31 am

Why is Mikrotik ignoring all those request for UDP based OpenVPN and proposing and TCP VPN solution as an alternative ?
OpenVPN is very very buggy and hard to implement. Our developers almost all committed suicide trying to make it work. It's a big mess, so we can't continue to implement it 100%

I disagree. Before I used MT for my VPN concentrator, I had a standard CentOS box with OpenVPN from source running flawlessly with RADIUS/certificate authentication using UDP and LZO compression.

I switched to MT because I figured an embedded system would end up being more reliable and manageable than a full PC.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:33 am

Another problem with it, client and server end must match configuration 100%. if you have different clients connecting, this will be a huge pain to get done. OpenVPN is hard to configure. Maybe not for you, but in comparison to our other options.
No answer to your question? How to write posts
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 714
Joined: Tue Aug 25, 2009 12:01 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jun 09, 2010 8:38 am

Another problem with it, client and server end must match configuration 100%. if you have different clients connecting, this will be a huge pain to get done. OpenVPN is hard to configure. Maybe not for you, but in comparison to our other options.
Previously, I had Windows and linux clients connecting to it... The only difference is the limitation on the Windows side and not being able to do point-to-point addresses (Windows will only do a /30 in the tap32 interface).

I dunno.. It was easy for me to setup...

PS: I think I figured out why OpenVPN would bomb out my RB1000 randomly. I put a script in that runs every minute removing invalid IP addresses... So far, that seems to fix it. OpenVPN IPs seem to stick around in certain disconnect situations for some reason..
 
Fransisfl
just joined
Posts: 4
Joined: Mon Sep 05, 2011 11:46 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Sep 07, 2011 2:17 pm

OpenVPN comes with scripts to automate the process (If you ask nicely, I'll send you my scripts to automate the process even more.) You'll also want to ensure the client's key expires within a reasonable amount of time and require a password. Also, OpenVPN supports static keys which is good for LAN-to-LAN connections. It can be a bit scary letting remote users have a static key out in the wild, so a public/private key exchange is best for remote users. Static keys should be changed very often (Note: OpenVPN static keys that are created on Windows can be used on Linux and vice versa. Remember the dos newline issue if you are creating and sending keys between unix and windows systems.
Last edited by Fransisfl on Wed Jun 13, 2012 4:48 pm, edited 2 times in total.
 
User avatar
elgo
Member Candidate
Member Candidate
Posts: 151
Joined: Sat Apr 02, 2011 2:34 am
Location: France

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Sep 08, 2011 12:22 pm

I don't like these kind of behaviour from MT crew when a user ask for a standard feature ("do you really need it? why won't you do something different like use this non-standard thing that we MT like?").
But what I hate beyond anything is bullsh..ing. OpenVPN hard to configure, really?

Anyway, for us, sysadmins and netadmins to understand clearly the issue, what exactly is preventing rOS user to benefit from all upstream features? I mean, routerOS is linux based, and aren't openVPN upstream sources available?
You have some difficulties to priovide a mere OpenSSH server or a OpenVPN server on routerOS and I wonder why.

I really would be happy to understand (I like days when I go to bed less stupid than the eve). :)
RB450G - OpenWrt (so much more stable than with routerOS)
-> now: UBNT EdgeRouter Lite

(very unlikely to be MT customer again in the future)
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Sep 08, 2011 12:32 pm

Thank for bringing up a thread more than a year old.

The answer was clear - We will not make new OpenVPN features.
No answer to your question? How to write posts
 
petrn
Member Candidate
Member Candidate
Posts: 179
Joined: Thu Jul 29, 2010 3:56 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Sep 08, 2011 5:13 pm

Thank for bringing up a thread more than a year old.
What about automatically locking topic after let say 6 months of inactivity?
Petr
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Sep 09, 2011 8:22 am

Thank for bringing up a thread more than a year old.
What about automatically locking topic after let say 6 months of inactivity?
not all topics get irrelevant after 6 months
No answer to your question? How to write posts
 
janisbvp
Frequent Visitor
Frequent Visitor
Posts: 74
Joined: Thu Jul 15, 2010 10:33 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Sep 09, 2011 12:16 pm

Thank for bringing up a thread more than a year old.
The answer was clear - We will not make new OpenVPN features.
Well, I am ready to move from OpenVPN, but I need a good, speedy solution. My setup is:
> RB450
> Internet with dynamic ip and dyndns (every router on planet that has dyndns option, is easier to setup with dyndns that MT, why oh why?)
> 6 machines (2x WinXP SP3, 1x Win7HomePremium, 2x Ubuntu 10.04, 1x Osx 10.4)
> Need for: Vpn that works over 3g/umts/hsdpa connections without hassle. Good encryption - PPTP is out of any consideration, period. VPN client software for all of these platforms.

Any good offers?

My point is: Good low power cpu + ROS = bundle of features, speed amd versatility = why I choose it. If any of the parts of equation drop out, I will have to start searching.
Of course, MT support and this forum is the greatest thing about MT and let's keep it this way.
 
User avatar
elgo
Member Candidate
Member Candidate
Posts: 151
Joined: Sat Apr 02, 2011 2:34 am
Location: France

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Sep 09, 2011 12:40 pm

Thank for bringing up a thread more than a year old.

The answer was clear - We will not make new OpenVPN features.
Yes, it was "clear" (not satisfying but not the point here :)) but in a general manner I'm wondering why you would "implement" this. What is the relation between openvpn server code in rOS and upstream OpenVPN server.
RB450G - OpenWrt (so much more stable than with routerOS)
-> now: UBNT EdgeRouter Lite

(very unlikely to be MT customer again in the future)
 
dejanp
newbie
Posts: 37
Joined: Wed Oct 08, 2008 4:57 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Jan 17, 2012 4:53 am

any news with udp and openvpn soon ? I am now forced to use openvpn and would need to change routers on 4 or 5 locations if can't made that working.

Thank you in advance,
Dejan
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 23866
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Jan 17, 2012 8:52 am

any news with udp and openvpn soon ? I am now forced to use openvpn and would need to change routers on 4 or 5 locations if can't made that working.

Thank you in advance,
Dejan

-->>>


The answer was clear - We will not make new OpenVPN features.
No answer to your question? How to write posts
 
hall757
just joined
Posts: 1
Joined: Sat Feb 11, 2012 7:28 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Feb 11, 2012 7:35 am

I am glad to have found this thread before I wasted money on what I thought would have been a good product. The other vendor thanks you for not supporting OpenVPN UDP.
 
mgiammarco
newbie
Posts: 42
Joined: Tue Apr 13, 2010 10:56 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Feb 18, 2012 12:37 am

Is it a joke or what?

1) UDP is suggested from openvpn creators and works better than tcp
2) apart from this ALL MY PARTNERS HAVE OPENVPN ON UDP and they will not change their setup because I HAVE A MIKROTIK. They laugh and says to me that debian or pfsense is free....

Who is online

Users browsing this forum: Bing [Bot] and 10 guests