OpenVPN 3 Linux

[hakimjonas]

Please confirm there isn't an open request for this package

• I have searched through package addition requests

Homepage

https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux

Maintainer

• Would you like to be the maintainer for this package?

Why should this be included in the repository?

Solus should include OpenVPN 3 because it delivers modern VPN management with built-in configuration, session handling, and privilege separation, enabling secure, unprivileged VPN usage. Its kernel-based Data Channel Offload enhances performance, while D-Bus integration allows flexible front-end development—all contributing to a streamlined, secure VPN experience.

See more at: https://github.com/OpenVPN/openvpn3-linux

I did not tick the box, but I probably wouldn't mind being the maintainer. I just have no experience with that yet and not sure exactly what it entails.

Are we allowed to redistribute it?

AGPL-3.0

What kind of user will use this package, and how many users do you think will use this package?

Any IT professional who is required top use openvpn as a part of their work. Any other user who sees a benefit of openvpn.

I don't know how many users will use it. I just know I had to use it to continue using Solus at work.

Link to source archive file

https://github.com/OpenVPN/openvpn3-linux/archive/refs/tags/v24.tar.gz

[EbonJaeger]

We already have programs like mullvad, wireguard, and Proton VPN; what does this do that the others don't?

[hakimjonas]

We already have programs like mullvad, wireguard, and Proton VPN; what does this do that the others don't?

I'm not sure I completely understand the question.

Can either of the apps you mention:

1. Allow me to connect to an openvpn based solution?

2. Do that for free?

I know Solus is meant for desktop, which is why I started using it in the first place. But is it exclusive to home users? I have really enjoyed using it for work the last 3 years, but my job requires me to use openvpn. I cant just tell the company: hey please change to x, y or z. And I suspect that many others in the IT industry is in the same place.

What more is: Solus already includes openvpn, so what is the argument against allowing more modern use of it?

[TraceyC77]

I think there's some confusion here, let me see if I can clear some of it up.

openvpn3-linux is a VPN client using the openvpn standard protocol

Proton VPN connects to the Proton VPN service (not openvpn), similar for mullvad
Wireguard connects to wireguard connections (not openvpn)

The code repo page goes into detail how OpenVPN 3 Linux takes advantage of the capabilities currently present in Linux compared to OpenVPN 2.x.

With that said, to clarify, does your job require openvpn3 specifically? It's already possible to use openvpn2 using the built in tools like Network Manager.

[hakimjonas]

I think there's some confusion here, let me see if I can clear some of it up.

openvpn3-linux is a VPN client using the openvpn standard protocol

Proton VPN connects to the Proton VPN service (not openvpn), similar for mullvad Wireguard connects to wireguard connections (not openvpn)

The code repo page goes into detail how OpenVPN 3 Linux takes advantage of the capabilities currently present in Linux compared to OpenVPN 2.x.

With that said, to clarify, does your job require openvpn3 specifically? It's already possible to use openvpn2 using the built in tools like Network Manager.

Unfortunately yes it does. I think its mostly because we use openvpn with SAML.

I have a similar issue with aws client vpn that is only released to ubuntu. That one is worse because they also use an older openvpn protocol so I we had to use a few hacks to make it work. Like patching openvpn and using systemd resolve etc.

But I perfectly understand why Solus cant just add this for my benefit. I guess I just supposed that I would not be the only user in a similar situation. Of course its things like these that keep my colleagues on Ubuntu.

As I explained earlier its not that I don't want to help out maintaining, its just that I haven't tried that before and I am unsure how much time / effort it would require of me to do properly. But feel free to ignore my request and I can just keep on compiling from source. I will just say that I appreciate your kind and open communication style @TraceyC77 and I apologize if I don't / haven't lived up to that standard.