Re: Correct installation for kernel modules

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1561 bytes --]

Hello Erik,

This is interesting, because OpenVPN probably needs some acceleration.

Throughput has always been poor because of the badly implemented fragmentation code, that is as far as I know also deprecated and therefore won’t be improved, but we all depend on it right now.

However, we have only made very bad experiences with out of tree kernel modules. Especially since we now only have two years on the LTS kernels, we need to be able to rely on those maintainers to keep up. I don’t want to say anything bad about them at all, but in the past, even projects that have been moving well suddenly stalled and became a large headache for us.

And there might be an alternative that should be an option for OpenVPN (at least theoretically): KTLS.

I did a quick Google search and could not find anything. But do you know how this module relates to KTLS? Can KTLS not be used in this case?

-Michael

> On 18 Oct 2023, at 10:50, ummeegge <ummeegge(a)ipfire.org> wrote:
> 
> Hi all,
> wanted to open a testing scenario for the OpenVPN data channel offload
> (DCO) --> https://github.com/OpenVPN/openvpn/blob/master/README.dco.md
> kernel module. So far i have been used this LFS -->
> https://git.ipfire.org/?p=people/ummeegge/ipfire-2.x.git;a=blob;f=lfs/ovpn-dco;h=8b056518fa7a638dddb39955248ac5b626b9b4cd;hb=5f85ecb7b26628fccbed65c08b54e35c7f249ee5
> but i wanted to ask for a proper or correct way, in special the
> installation paths of such modules but in general if i can handle it in
> such way.
> 
> Best,
> 
> Erik