Hi, As some of you know, I've been involved with the OpenVPN packages for some time as well as being an upstream OpenVPN developer and maintainer. Now we have released the third beta release of OpenVPN 3 Linux. This new client shares the same code base the OpenVPN Connect (proprietary) clients uses as well as the OpenVPN for Android when switching to use the OpenVPN 3 backend. The OpenVPN 3 code base is a rewrite in C++ and makes use of the more modern features of C++11. The Linux version is also very different from the OpenVPN 2.x generation, as it is now D-Bus based. We have done this to allow easier integration with other users and front-ends on Linux as well as having a better privilege separation. Once all the backend pieces of OpenVPN 3 Linux has settled non of them runs with more privileges than absolutely needed and there are several services running which is responsible for only a subset of the features. This is probably the least privileged OpenVPN implementation available today. On top of that, we have also tried to make DNS configuration work out-of-the-box as well (but here we need much more work to be really complete). Part of this project we're also trying to get some kind of equivalent of the Android VPN API in place on Linux. We have our own D-Bus service which provides the needed functionality and can hopefully work as a stepping stone towards something which can also be used outside OpenVPN alone too. The current implementation should already provide all the needed features to create and configure TUN devices (including IP addresses, routing and DNS) for unprivileged users. I'm announcing this here now as we also have Fedora Copr builds available for EPEL-7, Fedora 28, Fedora 29 and Rawhide. In not too far future I would like to get the process running to get the openvpn3 package into the mainline Fedora repositories as well. <https://copr.fedorainfracloud.org/coprs/dsommers/openvpn3/> Our main source repositories can be found here: <https://gitlab.com/openvpn/openvpn3-linux> <https://github.com/OpenVPN/openvpn3-linux> We would be very much interested to get more users to try this out and to move this project forward. The current codebase is in a reasonably good shape. It is a bit rough around the edges when it comes to the DNS configuration and /etc/resolv.conf handling, but otherwise it is fairly production ready. This project aims to have good and reasonable documentation. I'm not saying we're perfect in this regards, and we're open to improve here too. All D-Bus services should be fairly well documented and we should have man pages for most of the binaries we provide. * D-Bus details <https://github.com/OpenVPN/openvpn3-linux/tree/master/docs/dbus> * man pages: <https://github.com/OpenVPN/openvpn3-linux/tree/master/docs/man/> Feel free to reach out if you have some questions or good ideas. -- kind regards, David Sommerseth OpenVPN Inc _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
