vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1049 from fett0/Openvpn-dco-doc

Browse Source 
OpenVPN : add documetation DCO on VyOS
This commit is contained in:
Christian Breunig 2023-07-27 16:24:46 +02:00 committed by GitHub
commit 5299c30942
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 39 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
docs/configuration/interfaces/openvpn.rst
View File

@ -623,6 +623,45 @@ Will add ``push "keepalive 1 10"`` to the generated OpenVPN config file.
quotes using the ``"`` statement.
**********************************
OpenVPN Data Channel Offload (DCO)
**********************************
OpenVPN Data Channel Offload (DCO) enables significant performance
enhancement in encrypted OpenVPN data processing. By minimizing context
switching for each packet, DCO effectively reduces overhead. This optimization
is achieved by keeping most data handling tasks within the kernel, avoiding
frequent switches between kernel and user space for encryption and packet
handling. As a result, the processing of each packet becomes more efficient,
potentially leveraging hardware encryption offloading support available in
the kernel.
.. note:: OpenVPN DCO is not full OpenVPN features supported , is currently
considered experimental. Furthermore, there are certain OpenVPN features and
use cases that remain incompatible with DCO. To get a comprehensive
understanding of the limitations associated with DCO, refer to the list of
known limitations in the documentation.
https://community.openvpn.net/openvpn/wiki/DataChannelOffload/Features
Enabling OpenVPN DCO
====================
DCO support is a per-tunnel option and it is not automatically enabled by
default for new or upgraded tunnels. Existing tunnels will continue to function
as they have in the past.
DCO can be enabled for both new and existing tunnels,VyOS adds an option in each
tunnel configuration where we can enable this function .The current best
practice is to create a new tunnel with DCO to minimize the chance of problems
with existing clients.
.. cfgcmd:: set interfaces openvpn vtun10 enable-dco
Using this command over the interface is performing DCO ,is necessary reset
the tunnel.
Troubleshooting
===============