Solved OpenVPN DCO

[RypPn]

Bamboozled by how to implement this on FreeBSD 14, enabled if_ovpn_load="YES" in /boot/loader.conf but the correct syntax for the server.conf eludes me. Searching the internet is proving less than fruitful this morning for configuration settings to make this work. If I unset DCO in my poudriere build the package works fine as before, I'd just like to enjoy a bit better performance like wireguard manages to do. Any guidance gratefully received.

 

[dvl@]

You and me both....

 

[covacat]

if i understand corectly you just have to build it with dco support / load the module and the magic does the rest
you have to have a README.dco.md installed by the package
it seems only tun is supported, not tap?
doc is for linux only but should somehow apply to freebsd

 

[dvl@]

I was told: “kernel module has to be loaded, network topology set to subnet, compression disabled, openvpn process run as root and you will have it.”

I did that. I got it. I blogged it: https://dan.langille.org/2025/03/10/get-faster-openvpn-on-freebsd-by-enabling-dco-easily-done/

 

[RypPn]

Changing user did it for me Well, that's taken just over a year to solve that mystery, lol.

 

[dvl@]

Changing user did it for me Well, that's taken just over a year to solve that mystery, lol.

It is under-documented for sure.