if_ovpn - Kristof Provost - EuroBSDcon 2023
Channel: EuroBSDcon
Date: 2023-10-02

-Known Audio Issues- errant mixer was out of reach behind a locked door: 
Kristof Provost: if_ovpn
if_ovpn is the FreeBSD implementation of OpenVPN's Data Channel Offload (DCO) technology. DCO moves the OpenVPN data path into the kernel. This not only avoids the overhead of the traditional if_tun approach where data must be copied in and out of the kernel for every packet, but also the limitations imposed by the single threaded nature of the user space daemon. Finally, it allows OpenVPN to take advantage of cryptography offload hardware such as Intel's QAT.

if_ovpn will be part of FreeBSD 14.0. The upcoming OpenVPN 2.6.0 release is the first to support DCO, for Linux, FreeBSD and Windows.

This talk will present implementation details as well as performance results.

Kristof Provost:
Kristof is a freelance embedded software engineer specialising in network and video applications. He's a FreeBSD committer, maintainer of the pf firewall in FreeBSD and a board member of the EuroBSDCon foundation.

Kristof has an unfortunate tendency to stumble into uClibc bugs, and a burning hatred for FTP. Do not talk to him about IPv6 fragmentation.