Is data channel offload (DCO) driver supported for openvpn on FlexH series?

Options
Asgatlat
Asgatlat Posts: 117 image  Ally Member
First Comment Friend Collector Eighth Anniversary
in USG FLEX H Series

hi,

i use Openvpn for SSL VPN. everything worked but i wonder if DCO is supported with USG Flex H series ?

https://openvpn.net/as-docs/openvpn-data-channel-offload.html

regards

Best Answers

  • Zyxel_Tina
    Zyxel_Tina Posts: 370 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment
    Answer ✓

    Hi @Asgatlat,

    Thank you for your inquiry. After verification, our current uOS firmware for the USG Flex H series supports OpenVPN for SSL VPN functionality, but does not support OpenVPN DCO.

    To better understand your needs, could you please share the reasons why OpenVPN DCO is important for your use case? If possible, we would appreciate details about your application scenario and the benefits you expect from this feature. This information will help our development team consider it for future enhancements.

    We look forward to your feedback.

    Zyxel Tina

  • Zyxel_Tina
    Zyxel_Tina Posts: 370 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment
    Answer ✓

    Hi @Asgatlat,

    We appreciate your feedback.

    Currently, the USG FLEX H series does not support OpenVPN DCO. Recognizing the potential benefits of this feature for users, we have created an idea post for future evaluation.

    Please don’t forget to give it a vote if you also support this request.

    Zyxel Tina

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 370 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment
    Answer ✓

    Hi @Asgatlat,

    Thank you for your inquiry. After verification, our current uOS firmware for the USG Flex H series supports OpenVPN for SSL VPN functionality, but does not support OpenVPN DCO.

    To better understand your needs, could you please share the reasons why OpenVPN DCO is important for your use case? If possible, we would appreciate details about your application scenario and the benefits you expect from this feature. This information will help our development team consider it for future enhancements.

    We look forward to your feedback.

    Zyxel Tina

  • Asgatlat
    Asgatlat Posts: 117 image  Ally Member
    First Comment Friend Collector Eighth Anniversary

    hi @Zyxel_Tina

    OpenVPN DCO provides performance improvements on Access Server.

    OpenVPN DCO changes how Access Server handles the data flowing through the VPN tunnel. With DCO, data channel encryption and decryption are offloaded to kernel space, allowing the kernel to handle the work instead of dealing with it in user space. This saves on copy operations from kernel to user space and back and uses multi-threading.

  • Zyxel_Tina
    Zyxel_Tina Posts: 370 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment
    Answer ✓

    Hi @Asgatlat,

    We appreciate your feedback.

    Currently, the USG FLEX H series does not support OpenVPN DCO. Recognizing the potential benefits of this feature for users, we have created an idea post for future evaluation.

    Please don’t forget to give it a vote if you also support this request.

    Zyxel Tina

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）