From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: Correct installation for kernel modules
Date: Wed, 18 Oct 2023 19:42:15 +0100
Message-ID: <593D97C4-1CF8-407C-8F4D-C777C4EDD25C@ipfire.org>
In-Reply-To: <b6f907644008323f83540f771ba717d73a97ca13.camel@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4998366532381521284=="
List-Id: <development.lists.ipfire.org>

--===============4998366532381521284==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello Erik,

This is interesting, because OpenVPN probably needs some acceleration.

Throughput has always been poor because of the badly implemented fragmentatio=
n code, that is as far as I know also deprecated and therefore won=E2=80=99t =
be improved, but we all depend on it right now.

However, we have only made very bad experiences with out of tree kernel modul=
es. Especially since we now only have two years on the LTS kernels, we need t=
o be able to rely on those maintainers to keep up. I don=E2=80=99t want to sa=
y anything bad about them at all, but in the past, even projects that have be=
en moving well suddenly stalled and became a large headache for us.

And there might be an alternative that should be an option for OpenVPN (at le=
ast theoretically): KTLS.

I did a quick Google search and could not find anything. But do you know how =
this module relates to KTLS? Can KTLS not be used in this case?

-Michael

> On 18 Oct 2023, at 10:50, ummeegge <ummeegge(a)ipfire.org> wrote:
>=20
> Hi all,
> wanted to open a testing scenario for the OpenVPN data channel offload
> (DCO) --> https://github.com/OpenVPN/openvpn/blob/master/README.dco.md
> kernel module. So far i have been used this LFS -->
> https://git.ipfire.org/?p=3Dpeople/ummeegge/ipfire-2.x.git;a=3Dblob;f=3Dlfs=
/ovpn-dco;h=3D8b056518fa7a638dddb39955248ac5b626b9b4cd;hb=3D5f85ecb7b26628fcc=
bed65c08b54e35c7f249ee5
> but i wanted to ask for a proper or correct way, in special the
> installation paths of such modules but in general if i can handle it in
> such way.
>=20
> Best,
>=20
> Erik


--===============4998366532381521284==--