Community discussions

 
dtoffo
Trainer
Trainer
Posts: 97
Joined: Tue May 17, 2011 9:19 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun Mar 04, 2018 10:40 am

It's a long standing request, and shouldn't be a lot of work.
This is a 12 year old request. What is going on?? Had to switch all of my VPN clients to other routers simply because of this. Mikrotik OpenVPN was 600+ms ping time and LOTS of packet loss. PPTP or IPsec was 90ms. But, OpenVPN is the only tech that the NSA can't break and that is truly secure. Also, it is the only one besides PPTP that AT&T's routers will allow to have servers.
don't agree. routeros openvpn implementation sure is not complete neither perfect, but I have no problems on many ovpn over tcp tunnels I have. I don't have the big latency even if I ping traversing 2 tunnels.
 
intermod
newbie
Posts: 26
Joined: Mon Oct 01, 2012 5:59 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Mar 08, 2018 9:40 pm

Argh....stumbled across this limitation here. Needing UDP wOVPN here as well. The UDP seems to operate faster, and we use lots of VoIP here that cannot tolerate retries. Is this a CPU horsepower issue?
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Mar 08, 2018 10:35 pm

No, the problem is that RouterOS does not use the opensource OpenVPN program but they have re-implemented it.
So the advances in OpenVPN with release of each new version do not carry over into the RouterOS version.
Apparently nobody at MikroTik dares to take on the task of updating their implementation or axing it entirely and using the open source version instead.
It has been promised that this would happen in RouterOS v7 but it looks like v7 has been indefinitely postponed.
(in another topic the remark has been made that "most features of v7 have been backported into v6 so why would we still want v7?")
 
4xy
just joined
Posts: 2
Joined: Sun Mar 25, 2018 7:26 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun Mar 25, 2018 7:37 pm

I bought one due to it costs $20, looks very good all around and SUPPORT OpenVPN... It's really sad, it seemed the happiness is here!! :(
 
melky
just joined
Posts: 2
Joined: Wed May 09, 2018 11:02 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed May 09, 2018 11:05 am

+1 for UDP tunnels
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 5:51 am

I very disappointed to read this topic after i brought MikroTik hAP ac². :( :(
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 6:00 am

Still no news in June 2018 after two year.

viewtopic.php?f=1&t=77898&start=150#p527829
 
User avatar
dynek
Member Candidate
Member Candidate
Posts: 192
Joined: Tue Jan 21, 2014 10:03 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 7:34 am

I very disappointed to read this topic after i brought MikroTik hAP ac². :( :(
Did you really buy an access point to establish OpenVPN connection(s) ?!
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 12:01 pm

I very disappointed to read this topic after i brought MikroTik hAP ac². :( :(
Did you really buy an access point to establish OpenVPN connection(s) ?!
I prepare to install OpenVPN server in hAP ac2.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 12:29 pm

I prepare to install OpenVPN server in hAP ac2.
It is possible but it will just be a server with very limited options.
After all this I start to think it would be better when MikroTik simply relabled the OpenVPN feature: name it something like MikroTikVPN and don't suggest any compatability to OpenVPN.
Then prospective buyers will no longer be deceived into thinking that they can use this OpenVPN feature to interconnect with some other OpenVPN service or client.
It would make it just an incompatible variant of SSTP and it could just as well be dropped entirely, but keeping it so existing users do not have to rework their setup would be nice.

As an OpenVPN server or client, well, it is just worthless.
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 12:33 pm

I prepare to install OpenVPN server in hAP ac2.
After all this I start to think it would be better when MikroTik simply relabled the OpenVPN feature: name it something like MikroTikVPN and don't suggest any compatability to OpenVPN.
Really agree your comment.
 
Sob
Forum Guru
Forum Guru
Posts: 4676
Joined: Mon Apr 20, 2009 9:11 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 3:53 pm

Nah, give it a little time (*1), it will happen. Check it yourself, how the attitude changes from "no way" to "we already have it" (*2):

search.php?keywords=openvpn&author=normis

It's getting more optimistic over the time.

-
(*1) two or five years, ten maximum
(*2) at least a part of it
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 5:56 pm

Nah, give it a little time (*1), it will happen. Check it yourself, how the attitude changes from "no way" to "we already have it" (*2):

search.php?keywords=openvpn&author=normis

It's getting more optimistic over the time.

-
(*1) two or five years, ten maximum
(*2) at least a part of it
At least, they give the user a answer. Yes or no. It is very easy to answer. I don't know why they always silence.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 6:13 pm

What silence are you talking about? The answer was already given: "v6 - no UDP, v7 - UDP is ready, just wait for v7 itself".
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 8:11 pm

But there has also been the "well... maybe there will not be a v7... we already implemented most of the promised features in v6!".
Of course this does not include the promised features w.r.t. OpenVPN. (and others, e.g. BGP)
 
Sob
Forum Guru
Forum Guru
Posts: 4676
Joined: Mon Apr 20, 2009 9:11 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 8:46 pm

Yep, we could use some update, at least about status of the thing, if not for OpenVPN itself. Because while some features might be impossible to add to v6, OpenVPN shouldn't be one of them.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
User avatar
dynek
Member Candidate
Member Candidate
Posts: 192
Joined: Tue Jan 21, 2014 10:03 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 14, 2018 11:28 pm

Huh huh what about Metarouter on RB1100AHx2 :-)
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jun 15, 2018 4:06 am

What silence are you talking about? The answer was already given: "v6 - no UDP, v7 - UDP is ready, just wait for v7 itself".
Link, please.

v7 should be developed over FOUR Years. When we can get the v7 ?
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jun 15, 2018 10:50 am

Link, please.
search.php?keywords=openvpn&author=normis
v7 should be developed over FOUR Years.
Even more.
When we can get the v7 ?
When it's ready.
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jun 15, 2018 12:30 pm

Link, please.
search.php?keywords=openvpn&author=normis
v7 should be developed over FOUR Years.
Even more.
When we can get the v7 ?
When it's ready.
I just wait until they ready. I hope my router is worked when they ready. :lol:
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jun 15, 2018 12:45 pm

We're all waiting for it :)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
galeoner
just joined
Posts: 4
Joined: Wed Dec 25, 2013 9:35 pm
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jun 21, 2018 8:07 pm

we're still waiting +1
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jun 25, 2018 11:25 am

we're still waiting +1
Please post this only once a couple of month/years, not every week :)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
AlexKV
just joined
Posts: 18
Joined: Tue Jul 06, 2010 9:57 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Sep 03, 2018 10:38 pm

up )
+1 UDP
 
gnro
just joined
Posts: 2
Joined: Sun Aug 05, 2018 9:52 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Sep 08, 2018 3:13 pm

Waiting...

+1 UDP suport OpenVPN ovpn
+1 RouterOS v7 :-)
 
User avatar
spippan
Member Candidate
Member Candidate
Posts: 100
Joined: Wed Nov 12, 2014 1:00 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 05, 2018 9:31 am

Hmm, alpha... it looks like we may get something ready for this thread's 10th anniversary. I just hope that other nice OpenVPN features will also make it to the party.
LZO compression and SHA2 (SHA512) authentication come to mind...
wondering why one would go with ShA512 ... what is the big benefit (security/performance balance in mind) going with that?
sha256 brings no real security benefit over sha192 (hash length extension vuln. and so forth....)

LZO on the other hand would be a BIG improvement and UDP anyway! mikrotik is driving its users insane with still not implementing such "feature" (it is a basic openvpn mechanism AFAIK)....

come on guys ... this is not funny anymore and it's not getting better....
---
raiffeisen data center infrastructure and security
...stay curious
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5934
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 05, 2018 5:16 pm

LZO is deprecated, so you should be asking for LZ4 instead
 
Sob
Forum Guru
Forum Guru
Posts: 4676
Joined: Mon Apr 20, 2009 9:11 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 05, 2018 7:20 pm

You better have LZ4 up your sleeve already, otherwise it's a cruel joke! :)
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
tkgit
Frequent Visitor
Frequent Visitor
Posts: 59
Joined: Sun Dec 23, 2012 8:32 am
Location: Dunedin, NZ
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Oct 09, 2018 6:09 am

from here :
https://www.reddit.com/r/Windscribe/com ... ard_setup/

how about SHA512 auth,
I can not use my windscribe account
 
Paco
just joined
Posts: 6
Joined: Mon Dec 22, 2014 10:50 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Oct 10, 2018 9:59 pm

+1 for UDP support for OVPN on MikroTik
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Oct 11, 2018 3:31 am

from here :
https://www.reddit.com/r/Windscribe/com ... ard_setup/

how about SHA512 auth,
I can not use my windscribe account

+1 for sha256/sha512 in openvpn
seems it got implemented for ipsec recently
 
nin
just joined
Posts: 22
Joined: Sat Feb 20, 2010 9:02 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Oct 11, 2018 11:05 pm

The long waiting time makes me so sad! Products and software - this is not a good match. One is good the other is a joke!
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Oct 11, 2018 11:18 pm

The long waiting time makes me so sad! Products and software - this is not a good match. One is good the other is a joke!
Please enumerate your list of commercial routers (not alternative firmware) that actually have OpenVPN support that conforms to your wishes.
 
User avatar
dynek
Member Candidate
Member Candidate
Posts: 192
Joined: Tue Jan 21, 2014 10:03 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 12, 2018 9:49 am

Another solution would be to support and maintain Metarouter.... even on the RB1100AHx2, but that's another story.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 12, 2018 11:21 am

Another solution would be to support and maintain Metarouter.... even on the RB1100AHx2, but that's another story.
Yes, it would be very good to have metarouter back in service, or some other way of running user programs in some sandbox that only gives them some memory, a disk directory, and one or more network interfaces towards the physical router (tun/tap or similar).
That would allow all kinds of solutions to issues being posted all the time here and in the feature suggestion topic.
(OpenVPN, Wireguard, full-function DNS server, DHCP server for exotic requirements, etc etc)
 
pianisteg
just joined
Posts: 2
Joined: Sat Oct 13, 2018 12:10 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Oct 13, 2018 1:34 am

LZO is deprecated, so you should be asking for LZ4 instead
What about TLS auth and no username/password auth (only by keys)?
 
User avatar
dynek
Member Candidate
Member Candidate
Posts: 192
Joined: Tue Jan 21, 2014 10:03 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Oct 13, 2018 8:22 am

Aaahhh Wireguard 😍
 
User avatar
spippan
Member Candidate
Member Candidate
Posts: 100
Joined: Wed Nov 12, 2014 1:00 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Oct 18, 2018 4:21 pm

LZO is deprecated, so you should be asking for LZ4 instead
well ...

Image
---
raiffeisen data center infrastructure and security
...stay curious
 
xt22
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Tue Jul 14, 2015 1:16 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Oct 18, 2018 4:58 pm

+1 for UDP.

Damn, take 10% of my payments to you for routers and hire a programmer for 6 months to do this (he'll implement it in a few weeks and work for you for the remaining 5 months) :-/ It is so annoying to have CCRs with speed of RB750 running openvpn via TCP..
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Oct 18, 2018 5:08 pm

+1 for UDP.

Damn, take 10% of my payments to you for routers and hire a programmer for 6 months to do this (he'll implement it in a few weeks and work for you for the remaining 5 months) :-/ It is so annoying to have CCRs with speed of RB750 running openvpn via TCP..
Instead, pay them to implement the suggestion in message viewtopic.php?p=692031#p692031
That will serve a lot of other purposes on CCR.
 
xt22
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Tue Jul 14, 2015 1:16 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 19, 2018 12:36 pm

Instead, pay them to implement the suggestion in message viewtopic.php?p=692031#p692031
That will serve a lot of other purposes on CCR.
Although I agree, I believe that would take some serious time. I don't get the point of not implementing already finished UDP support and waiting years for v7.. this reminds me the play "Waiting for Godot" :-/ TCP ovpn between europe and usa is damn slow, I had to go back to the good old l2tp+ipsec
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Oct 19, 2018 6:22 pm

It is likely quite easy to implement a user process but it could take some iterations to make it completely secure.
I would envision it like: you make a folder on the flash disk and put the executable there and add a config item which specifies the folder and the network devices you desire.
(like 1..4 tun/tap devices)
RouterOS creates/opens/initializes the tun/tap devices and chroots to the folder and starts the program. The program can read/write files (only) from "the root directory" which is the folder, and it can access the pre-opened network devices. The other end of those devices is visible in RouterOS where you can put them in a bridge, or set an IP address on them and route to them.
The program runs as a nonprivileged user which is disallowed to make critical system calls.
The user cross-compiles his software for the processor architecture (using gcc) and links it as a standalone executable. Maybe a libc shared library could be made available.

Once this is realized you can port a current version of standard OpenVPN or other software which includes all features you like, which is of course much easier to do than to add features to the rewrite that MikroTik is using in RouterOS.
I am running an old TCP/IP program (KA9Q NET) under Linux using this method in a Raspberry Pi, and it works perfectly.
 
jgro
newbie
Posts: 46
Joined: Sat Jun 10, 2017 7:33 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Nov 06, 2018 3:40 am

Count me as +10 for OpenVPN over UDP. If you do not know why this is important, see http://sites.inka.de/bigred/devel/tcp-tcp.html

I have iOS programs that simply do not work because of the transmission problems caused by trying to run their TCP connections over TCP-based OpenVPN. They just get into some kind of meltdown and give up.

I bought the hEX for only 2 reasons: to provide a IPv6 firewall and to provide remote access. I bought a hAP for only one reason: to enable remote access. Since I eventually decided that IPv6 was too much of a privacy risk and disabled it, it turns out that I pretty much wasted my money on the hardware and wasted a considerable amount of time (~200 hours) figuring all this out.
 
echo
just joined
Posts: 4
Joined: Mon Apr 16, 2018 10:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Nov 10, 2018 3:49 pm

+100 for standard openvpn realization.
It`s awful that 10 years old, very important issue is still open. OpenVPN nowadays is used by different kind of customers and there is no way to use mikrotik routers without openvpn with certs and udp protocol.
And another even bigger problem is that support team does not want (can`t) to tell when normal openvpn will be supported by router OS (if it will), so I have to guess what to do, whether to change the equipment or wait (it is not clear how long) that a miracle will happen and normal protocol support will finally appear.

Such a lack of information and lack of dates and workflows about this topic is very strange for a rather famous company.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Nov 10, 2018 4:39 pm

I have to guess what to do, whether to change the equipment or wait
I wonder what router equipment you are going to change to (with software supported by the router manufacturer) that will do what you need...
Of course a plain Linux system can do it, and some open router firmware replacement can do it, but what manufacturer-supported router is your alternative?
 
echo
just joined
Posts: 4
Joined: Mon Apr 16, 2018 10:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Nov 10, 2018 7:21 pm

This is not the same level but anyway for example ASUS right out of the box from 2017 for customers with 10-20 light users.
RT-AC66U

And as you mentioned - any router with replaced firmware "from Padavan", DD-WRT, Open-WRT, Tomato and so on.

Metarouter is not the same. OpenVPN in metarouter is very peculiar thing.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Nov 10, 2018 9:26 pm

Of course you can install such alternative firmware on some of the MikroTik routers as well.
And mentions on spec sheets of other routers is not the full story!
Before my MikroTik router I had a Draytek router which claimed OpenVPN support on the spec leaflet, but by the time I had bought it and updated the firmware, the whole OpenVPN feature had been silently removed.
There probably are software licensing issues around it, which also could explain why MikroTik do not simply add the latest OpenVPN program in RouterOS but instead did their own rewrite of a subset of the functions.
 
jgro
newbie
Posts: 46
Joined: Sat Jun 10, 2017 7:33 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Nov 13, 2018 1:39 am

I wonder what router equipment you are going to change to (with software supported by the router manufacturer) that will do what you need...
I understand the OpenVPN license is problematic.

It would be fine with me if Mikrotik would only support OpenVPN udp and drop support for tcp. It would also be fine if they created a way for us to install an OpenVPN package from somewhere else.
 
stefan44
just joined
Posts: 3
Joined: Wed Oct 16, 2013 12:39 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Nov 14, 2018 5:39 pm

+1
We are installing Mikrotik Routers in renewable power plants for remote monitoring+control. Connection to our own VPN-Server is no Problem, but the connection to all the energyexchage traders must be done via ovpn udp. At the moment we are installing 2 Routers in each Plant, one Mikrotik for routing, firewall, NAT, VPN and WAN-connection and one Ubiquiti just for one ovpn-udp connection.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Nov 14, 2018 7:24 pm

You could consider using a single router or server at central location to do the OpenVPN and route everything first to central (using whatever VPN you like) and then further route it over OpenVPN there.
Or ask the traders to support really standard protocols in addition to OpenVPN. In a similar situation (which involved only us and 1 other party) I was successful in convincing them that only offering OpenVPN and not IPsec, L2TP/IPsec or similar was not very flexible.
 
maara
newbie
Posts: 43
Joined: Fri Jun 10, 2011 8:42 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Nov 22, 2018 1:12 pm

Just came here to update this 10 years old thread and to ask for a serious support of 17 years old widely used vpn...
 
User avatar
acald3ron
just joined
Posts: 18
Joined: Tue Jan 06, 2015 8:26 am
Location: Rosarito, México
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Nov 29, 2018 7:03 am

+1 for UDP tunnels Por favar.

I dont want to wait anymore !
 
SvenB
just joined
Posts: 1
Joined: Mon Dec 24, 2018 5:59 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Dec 24, 2018 6:07 pm

We are almost in 2019 and still no UDP support.
Shame on you :?

Would be great if we could get it and also not only sha1 and md5 for auth :)


Keep looking forward to this!
 
jgro
newbie
Posts: 46
Joined: Sat Jun 10, 2017 7:33 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Dec 31, 2018 8:32 am

In a similar situation (which involved only us and 1 other party) I was successful in convincing them that only offering OpenVPN and not IPsec, L2TP/IPsec or similar was not very flexible.
What options does Mikrotik have for a UDP (or at least not TCP) based secure connection that I could use to tunnel an EoIP connection?
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Dec 31, 2018 11:04 am

L2TP/IPsec, GRE/IPsec, IPIP/IPsec, plain IPsec transport.
 
msatter
Forum Guru
Forum Guru
Posts: 1240
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Dec 31, 2018 6:23 pm

NordVPN says no. RouterOS is getting outdated.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.20 / MikroTik APP 1.3.4
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Dec 31, 2018 9:30 pm

NordVPN says no. RouterOS is getting outdated.
Implementing such services on a router is silly. You should implement it on your end device so the entire path is protected.

Furthermore, when today's protocol enforced by something like NordVPN would be implemented by MikroTik, tomorrow they
will switch to another protocol that appears to be better at that time. Look, people are already requesting Wireguard
and unimplemented IKEv2 options. It is just not possible to satisfy everyone in a commercial closed-source router.
Either get some open box that you can tinker yourself, or do it on the endpoint (PC, phone, etc).

MikroTik could include an extension possibility in the form of a "MetaROUTER light" that allows the user to run processes that
implement network functions like exotic VPNs, special DNS servers, etc.
I have suggested it before but there is total lack of response, so apparently total lack of interest.
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Jan 01, 2019 8:33 pm

hi, I wanted to know if mikrotik intends to implement the protocol udp and security sha 256 on its openvpn.
Thank you
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jan 02, 2019 12:46 pm

hi, I wanted to know if mikrotik intends to implement the protocol udp
It's implemented already, just wait for the release :)
viewtopic.php?f=1&t=26499&p=617477#p617477
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Jan 02, 2019 1:18 pm

perfetc
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jan 03, 2019 12:20 pm

just to know, do you know an approximate release date? I would not wait all 2019 ...
 
baragoon
Member Candidate
Member Candidate
Posts: 125
Joined: Thu Jan 05, 2017 10:38 am
Location: Kyiv, UA

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jan 03, 2019 12:53 pm

just to know, do you know an approximate release date? I would not wait all 2019 ...
in a far future :lol:
 
wispmikrotik
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Tue Apr 25, 2017 10:43 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jan 04, 2019 12:31 am

just to know, do you know an approximate release date? I would not wait all 2019 ...
Maybe @normis can say a date, will it be before 2020?
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jan 04, 2019 10:24 am

let's not joke guys, we hope in a very short time that solve this gap
 
jrpaz
Frequent Visitor
Frequent Visitor
Posts: 82
Joined: Wed Jun 05, 2013 5:54 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Jan 04, 2019 2:52 pm

I bet 2022 by then everything will be obsolete.
 
psydrohne
just joined
Posts: 3
Joined: Sun Jan 06, 2019 5:25 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun Jan 06, 2019 5:38 pm

+1 for udp support for ovpn
 
rea1ity
just joined
Posts: 24
Joined: Mon Jun 24, 2013 10:24 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jan 10, 2019 1:10 am

Thank for bringing up a thread more than a year old.

The answer was clear - We will not make new OpenVPN features.
Noooooooooo.....
 
rea1ity
just joined
Posts: 24
Joined: Mon Jun 24, 2013 10:24 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Jan 10, 2019 1:16 am

If you really need those features at the moment. Run openwrt image in metarouter and run ovpn from there with full feature set.
A-HA! :D
 
slech
Long time Member
Long time Member
Posts: 533
Joined: Thu Feb 14, 2008 4:03 pm
Location: Moldova, Chisinau

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun Jan 13, 2019 10:44 pm

Introducing AWS Client VPN to Securely Access AWS and On-Premises Resources
AWS Client VPN is a new managed service that provides you with the ability to securely access your AWS and on-premises networks from anywhere, using OpenVPN-based clients.
sorry for my english
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jan 14, 2019 8:22 am

Does it require UDP? Can't find anything about that.
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
User avatar
dynek
Member Candidate
Member Candidate
Posts: 192
Joined: Tue Jan 21, 2014 10:03 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jan 14, 2019 3:46 pm

https://youtu.be/qmKkbuS9gRs

TCP or UDP is being mentioned in the second part of the video

edit:
oh and: https://docs.aws.amazon.com/vpn/latest/ ... oints.html

(Optional) By default, the Client VPN server uses the UDP transport protocol. To use the TCP transport protocol instead, for Transport Protocol, select TCP.
Note: UDP typically offers better performance than TCP.
 
slech
Long time Member
Long time Member
Posts: 533
Joined: Thu Feb 14, 2008 4:03 pm
Location: Moldova, Chisinau

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon Jan 14, 2019 7:33 pm

Chupaka,

Yes, it should work with TCP too.

From he other side it works with:
- Active Directory authentication
- Certificate authentication

AWS VPN client was mentioned mostly to mention that this technology is used and maybe MIkrotik team will be able to pay attention to it.
sorry for my english
 
anav
Forum Guru
Forum Guru
Posts: 2969
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Feb 19, 2019 3:54 pm

In response to the openvpn teaser......

Its a promise for your grand children. 6.43.13, 6.43.14, 6.43.15.................................... 6.43.aa, 6.43.ab, 6.43.ac...........................................
6.44.1, ........6.44.aa
6.45.1,...........6.45.aa

zzzzzzzzz 15 minutes......... more like 15 years LOL.
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
 
therealrockguy
just joined
Posts: 1
Joined: Mon Jan 14, 2019 7:40 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Mar 01, 2019 11:22 pm

I've been patiently waiting for 2 years. I might have better luck trying to convince my VPN provider to make a less secure connection just for mikrotik routers
 
adilsemedo
just joined
Posts: 14
Joined: Fri Sep 29, 2017 9:47 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri Mar 08, 2019 7:55 pm

Does anyone here used successfull the OpenVPN with www.privatetunnel.com/
I´m struggling to make it work, but it doenst work...
WISP Engineer
MTCNA MTCRE MTCWE
 
draid
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Wed Aug 22, 2018 5:42 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sat Mar 09, 2019 12:22 am

+1 for the UDP

And the silly duplicate package error is terribly annoying don't know why it isn't addressed.
 
brandaoeb
just joined
Posts: 6
Joined: Fri Jan 27, 2017 9:06 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun Mar 10, 2019 1:48 pm

Hi:
I just wont wait for Mikrotik no more.
Bought a ASUS RT-AX88U 186€ 200Mbits openvpn no cpu usage
chears
 
jrpaz
Frequent Visitor
Frequent Visitor
Posts: 82
Joined: Wed Jun 05, 2013 5:54 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue Mar 12, 2019 2:33 pm

Why is everyone upset? It's all fixed in v7
 
User avatar
aszody
just joined
Posts: 3
Joined: Wed Sep 10, 2014 11:41 am
Location: Geneva, Switzerland

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu Mar 14, 2019 10:20 pm

You should not continue waiting for something that may very well never happen.
As a general principle, when you buy some piece of equipment, from a core router down to your connected light bulb, buy it for what it's embedded software can *currently* do, not for feature XYZ that the seller tells you will be implemented in a future version. If you do the latter, you take the risk that XYZ will not be available over the whole replacement cycle of your hardware...
If that feature is vital for you, then either defer your procurement, get a contractual commitment that you will get it at a planned date, look for an alternative, or - if you have access to the necessary skills - find something that is open enough that you can go the open source route.

I maintain or have installed a couple of OpenVPN setups, and I have stopped years ago trying to terminate the VPNs on the router. I use mikrotik hardware for what they are great : simple, efficient routing, lots of interfaces, and a low price. RouterOS implementation of OpenVPN is deficient at best, so just stay away from it. My usual setup is a Pcengines' APU, attached to one or more of the interfaces of the router and running the open source version of OpenVPN on a current linux distribution. It comes with the latest features, like UDP (just joking...), offers all the configuration options that ROS lacks, and is easy to keep current. Besides, I can script the way I authenticate users, based on any kind of directory, which is much more flexible than ROS' users management.
 
echo
just joined
Posts: 4
Joined: Mon Apr 16, 2018 10:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Mar 27, 2019 12:14 am

aszody, it is ok if you have $100-toy used as vpn gate but that means additionl power consumption, additional loss of speed, additional problems with routing especially when you have another l2tp/ipsec vpn tunels to other offices and l2tp should not be inside openvpn.
If product has openvpn protocol in its spec than there should be working implementation of this protocol.
Or there should not be any mention of openvpn in specs because its not openvpn, its some strange "mikrotik vpn" but not openvpn.

By the way, are there any news about openvpn standard implementation? NordVPN does not support mikrotik routers nowadays (as almost all other vpn providers), and openvpn became the standard for vpn protocols.

It is very sad that there is no news at all about this problem. Maybe the current OS can not get the implementation of openvpn because of some economical issues or pricing? Tell us please what is the problem? I do not beleave that you could not create normal openvpn implementation because 10 years is, to my mind, enought to create anything and even a space rocket or Tesla.
 
Sob
Forum Guru
Forum Guru
Posts: 4676
Joined: Mon Apr 20, 2009 9:11 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Mar 27, 2019 1:57 am

They are strategically waiting until OpenVPN becomes obsolete, to avoid implementing it in full. It will happen eventually, something better will come up, e.g. there currently seems to be big hype behind WireGuard and some see it as future OpenVPN killer. RouterOS has currently zero support for that, but it can change if it catches up, especially if it's easier to implement than OpenVPN. And I remember that OpenVPN being too complicated was a reason given it the past, why they stopped with tcp and don't want to touch it anymore. Supposedly, they already implemented udp support since then, but there must still be some problem, otherwise they would have released it already.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
User avatar
dynek
Member Candidate
Member Candidate
Posts: 192
Joined: Tue Jan 21, 2014 10:03 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Mar 27, 2019 9:55 am

WG is making it soon into the kernel:
https://www.phoronix.com/scan.php?page= ... ot-In-4.20

Mtik first have to update the kernel though or run a version that supports WG module.
Just forget about OpenVPN and go straight to WG guys!
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Mar 27, 2019 4:58 pm

And I remember that OpenVPN being too complicated was a reason given it the past, why they stopped with tcp and don't want to touch it anymore.
The issue is that they re-wrote an OpenVPN implementation instead of just taking the OpenVPN code that everyone uses, and now the original code is being extended all the time and it would be complicated to follow that.
RouterOS contains a lot of code that was directly copied from an opensource product and then modified, but OpenVPN seems to be a different case.
There likely are licensing issues with just taking openvpn and put it in your own router product, I have seen other cases where OpenVPN was first supported and then suddenly gone in a firmware update.

New kernel will be in version 7. We all know how that goes.
 
User avatar
awacenter
Member Candidate
Member Candidate
Posts: 200
Joined: Thu Dec 09, 2004 12:58 pm
Location: Castellón
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed Apr 17, 2019 11:31 am

So, In that case we have to wait until v7 es stable.

Can I know if route-push feature will be implementrd in OVPN in v7?
ImageImage
 
User avatar
Specialised
just joined
Posts: 8
Joined: Tue Jan 09, 2018 2:40 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu May 02, 2019 5:18 am

I am from the future (2040) - UDP is still not implemented.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5934
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Thu May 02, 2019 10:28 am

You must be from alternate future.
 
chiem
just joined
Posts: 19
Joined: Fri Oct 24, 2014 4:48 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon May 06, 2019 9:33 am

You must be from alternate future.
Go ahead and prove him wrong please.
 
User avatar
anthonws
just joined
Posts: 21
Joined: Sat Jan 09, 2016 6:46 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed May 08, 2019 2:33 am

This is getting to a point of being just plain pathetic...

Just forget about UDP and/or LZO...

Just make a decision, and if possible, fast!

#1 Adopt OVPN from source (not this crippled implementation)
#2 Adopt WireGuard (it's more than a "standard" now)

Oh, and provide timelines for this please.
Last edited by anthonws on Thu May 09, 2019 1:03 am, edited 1 time in total.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed May 08, 2019 10:14 am


Go ahead and prove him wrong please.
No problem, just wait for 2040
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
sdugoten
Frequent Visitor
Frequent Visitor
Posts: 59
Joined: Wed Aug 04, 2010 7:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun May 12, 2019 9:29 am

Been wait OpenVPN + UDP + LZO for at least 4 years. A lot of VPN service provider just stop providing other connection type except OpenVPN.

This is getting to a point that I have to move away from Mikrotik router because this is becoming a deal breaker.


I mean...just look at this

https://nordvpn.com/tutorials/

every major router support OpenVPN + UDP + LZO except....routerOS
 
Sob
Forum Guru
Forum Guru
Posts: 4676
Joined: Mon Apr 20, 2009 9:11 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Sun May 12, 2019 6:52 pm

@sdugoten: If it goes well, soon you may have some luck with NordVPN and IKEv2 (see here). Not that it would be an argument against full OpenVPN support.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
sdugoten
Frequent Visitor
Frequent Visitor
Posts: 59
Joined: Wed Aug 04, 2010 7:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon May 13, 2019 11:10 am

@sdugoten: If it goes well, soon you may have some luck with NordVPN and IKEv2 (see here). Not that it would be an argument against full OpenVPN support.
To be honest, IKEv2 is not as popular as OpenVPN. It's a bit too late.

RouterOS in general is late.

Having said that, I started to move my stuff to pfsense. pfsense just provide more functionalities that is commonly used in the public. And it's stable because it's build on top of FreeBSD. It also comes with Web interface that do most complex home networking stuff like policy base routing over VPN via their GUI. OpenVPN UDP is supported for MANY years already with AES-NI acceleration support, and Wireguard VPN is already coming on the way to pfsense. I mean..OpenVPN UDP takes Mikrotik 11+ years to analyze and have yet implement, which this function is so COMMONLY use out there, let's imagine how long you will see Wireguard VPN. I won't even think about AES acceleration support for those cpu that support it....because I don't see Mikrotik would even have time for that. This thread start in year 2008 and it is such a popular feature since 2012, this is no excuse.

I just stop waiting and move on.
 
User avatar
anthonws
just joined
Posts: 21
Joined: Sat Jan 09, 2016 6:46 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon May 13, 2019 1:28 pm

I'm going to stick around for more 9 years at least. 11 years is not enough time to age properly a piece of software.

To me, software has to be distilled for a minimum of 20 years!

No one better than Mikrotik knows how to do this properly!!

/S
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon May 13, 2019 5:39 pm

To be honest, IKEv2 is not as popular as OpenVPN. It's a bit too late.

RouterOS in general is late.
Please give a list of commercial router manufacturers that do support OpenVPN in their products and which have a level of support that is adequate.
(not opensource projects like OpenWRT or Pihole, actual manufacturers like MikroTik, Cisco, Juniper, Netgear, ZyXel, Draytek etc)
 
oscar120584
just joined
Posts: 7
Joined: Mon May 30, 2016 11:52 am

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Mon May 13, 2019 10:19 pm

To be honest, IKEv2 is not as popular as OpenVPN. It's a bit too late.

RouterOS in general is late.
Please give a list of commercial router manufacturers that do support OpenVPN in their products and which have a level of support that is adequate.
(not opensource projects like OpenWRT or Pihole, actual manufacturers like MikroTik, Cisco, Juniper, Netgear, ZyXel, Draytek etc)
It's easy ... For example ZyXEL Keenetic: https://help.keenetic.com/hc/en-us/arti ... VPN-client
TpLink: https://www.tp-link.com/en/support/faq/1544/

request to Google "<vendor> openvpn" gives a lot of articles. Only if <vendor> != mikrotik...
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue May 14, 2019 10:53 am

I think you'll have to agree that the majority of routers do not support OpenVPN, you may be able to find the odd product that does, but not like client and server across the entire product line of the manufacture, which MikroTik does offer.
The problem with OpenVPN on RouterOS is that it is a re-created implementation that was not further developed once it was "working", and the real OpenVPN product was.
So the MikroTik version became more and more incomplete.

But it is not like OpenVPN is the lingua franca of VPN that everyone supports except MikroTik, and MikroTik is behind for not having it.
You will find many many more routers that do IPsec than OpenVPN.

And there likely is a reason for not using the opensource version. Some time ago I bought a Draytek router and its specs leaflet included OpenVPN.
"nice", I thought, I may be able to use that.
But first thing I did was to bring the firmware to the updated version, and OpenVPN was gone! Not to be found anymore! later it was deleted from the specs leaflet too.
Why? We can only guess...
 
sdugoten
Frequent Visitor
Frequent Visitor
Posts: 59
Joined: Wed Aug 04, 2010 7:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue May 14, 2019 6:31 pm

I think you'll have to agree that the majority of routers do not support OpenVPN, you may be able to find the odd product that does, but not like client and server across the entire product line of the manufacture, which MikroTik does offer.
The problem with OpenVPN on RouterOS is that it is a re-created implementation that was not further developed once it was "working", and the real OpenVPN product was.
So the MikroTik version became more and more incomplete.

But it is not like OpenVPN is the lingua franca of VPN that everyone supports except MikroTik, and MikroTik is behind for not having it.
You will find many many more routers that do IPsec than OpenVPN.

And there likely is a reason for not using the opensource version. Some time ago I bought a Draytek router and its specs leaflet included OpenVPN.
"nice", I thought, I may be able to use that.
But first thing I did was to bring the firmware to the updated version, and OpenVPN was gone! Not to be found anymore! later it was deleted from the specs leaflet too.
Why? We can only guess...


I think you should look into the router brand that is for home networking, like Asus, DLink, Netgear, TP-Link...etc . Just so let you know, one way or the other, either stock firmware or DDWRT already support numerous VPN connection method including but not limited to OpenVPN UDP Lzo. On top of that, most home network function including stuff like DDNS on numerous platform, policy base routing, VPN client and VPN server , fiilter rules, NAT rules, switched port are all included. What else function you need besides these for home networking?

You want something more powerful? Edgerouter and Netgate router all comes with all the listed feature + all the stuff from RouterOS. Performance wise, whatever router that you buy after 2017 should reach NAT 1000Mbps no problem. These kind of performance is more than most people needed.

I mean...you really need to take a look what other brand is offering in 2019. You just need to take a look Netgate router with pfsense and see what function they offer.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5830
Joined: Mon Jun 08, 2015 12:09 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue May 14, 2019 8:29 pm

I think you should look into the router brand that is for home networking
Well, I not really am into home networking...
When I use VPN, I use it in the traditional way. To connect two networks over a tunnel across internet.
IPsec is normally fine for that.

And again, undoubtedly many open source projects use and support OpenVPN, I have an OpenVPN server running on a Linux box.
However, that is not what I consider "supported by a router manufacturer".
I don't see OpenVPN support in native firmware for brandname network routers like Cisco, Juniper, etc, and for "home routers" it also
appears to be more an exception than the rule.
 
Sob
Forum Guru
Forum Guru
Posts: 4676
Joined: Mon Apr 20, 2009 9:11 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Tue May 14, 2019 10:31 pm

Look at it from historical perspective. Static VPNs between two networks didn't have problems, simple IPSec could do the job. But the real fun was road-warrior VPN, i.e. connecting from all kinds of unpredictable networks. PPTP wasn't great with NAT, IPSec neither and L2TP was paired with IPSec, so same thing. Then there were other problems like routes, if you wanted to tunnel only some subnets (and no, road-warriors and BGP don't go well together ;)). Then came OpenVPN and it was like miracle, it needed only a single port to work, didn't care how much NATs are in the way, pushing routes from server was possible, ... everything a road-warrior VPN user could wish for. Maybe the big ones like Cisco weren't excited, because their target group was elsewhere, but the small users were and OpenVPN became standard for them.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
sdugoten
Frequent Visitor
Frequent Visitor
Posts: 59
Joined: Wed Aug 04, 2010 7:55 pm

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Wed May 15, 2019 6:13 pm

I think you should look into the router brand that is for home networking
Well, I not really am into home networking...
When I use VPN, I use it in the traditional way. To connect two networks over a tunnel across internet.
IPsec is normally fine for that.

And again, undoubtedly many open source projects use and support OpenVPN, I have an OpenVPN server running on a Linux box.
However, that is not what I consider "supported by a router manufacturer".
I don't see OpenVPN support in native firmware for brandname network routers like Cisco, Juniper, etc, and for "home routers" it also
appears to be more an exception than the rule.


you can check out all ASUS routers. They obviously not an "odd product" . Asus is one of the top brand for router in 2019 if you google it. Their stock firmware by default comes with all those features (policy base routing, opevpn/pptp/l2tp server and client) + mesh network as standard feature for router newer than 2017. If you look other home networking router forum, ASUS is pretty much the "standard" for home user. The other one is Edgerouter. Stock firmware comes with those feature already as well. Edgerouter is also one of the main competitor for Mikrotik in home networking and small office networking area. https://www.snbforums.com/threads/edger ... 011.54442/

If you look at viewforum.php?f=13 , just by looking at their question and the scale they describe, you should realize that a lot of users use routeros for home networking. Unlike Cisco or juniper, their target is 100% on business. Home networking users contribute a pretty big user base. Mikrotik ignoring a big percentage of their user base seems a bit weird to me. For other major router discussion forum like this one, https://www.snbforums.com/forums/routers.7/ , Asus, Edgerouter, Mikrotik are the main one used by home networking users.

About 10 years ago, Mikrotik was the king for home networking. It had features that none of the home router brand had back then. That's why I bought my first Mikrotik router, Routerboard 800, which was a home networking grade router back then. However, other brand started to catch up in recent years as I mentioned in my last post. Some of those brands even have more features than Mikrotik, including both home networking and business networking area due to a much larger user base and support from the community.

I
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Feature Request: OpenVPN [ovpn] udp tunnels

Fri May 17, 2019 4:50 pm

This is going far from the topic.
RouterOS v7 internal beta has OpenVPN UDP mode. Please wait until we release a public version and you will have it.
No answer to your question? How to write posts

Who is online

Users browsing this forum: MSN [Bot] and 78 guests