OpenVPN DCO Added to Linux Kernel for Built-In Speed and Security

The technology allows businesses to harness increased speeds without sacrificing network protection.

PLEASANTON, Calif.--(BUSINESS WIRE)--OpenVPN announced today that Data Channel Offload (DCO) has been officially green-lit for inclusion in the Linux kernel and will be part of the official distribution starting with version 6.16. This always-on kernel module named “ovpn” was designed to deliver faster speeds without negatively impacting security, and is part of OpenVPN’s mission to make Zero Trust VPN a reality for any business, regardless of size.

OpenVPN DCO implements the Linux kernel module which handles the OpenVPN data channel. As such, OpenVPN no longer sends data traffic between the user and kernel space for routing and encryption/decryption. Operations on payloads take place in the Linux kernel, optimizing performance, reducing latency, and cutting the cost of the payload transfer between user and kernel space.

Additionally, DCO operation is multi-threaded. Multi-threading is the process of splitting up tasks or jobs into smaller units and assigning them to different CPUs. This improves speed and performance up to 300% when compared with configurations not using DCO.

“OpenVPN DCO gives businesses superior performance, flexibility, and security,” said Francis Dinha, OpenVPN CEO. “After thorough review by the Linux community, maintainers, and experts, DCO is now included in the mainline kernel, which results in higher code quality, better security, and more robust implementation. Users of OpenVPN can now enjoy broad adoption and know that DCO will automatically benefit from ongoing kernel updates, including bug fixes, security patches, and support for new features.”

Linux networking tree (or netdev) maintainers accepted OpenVPN DCO for inclusion on April 17, 2025 as part of a patch set submission, resulting in OpenVPN DCO code being included in the Linux kernel itself from version 6.16 onwards — it will now be present by default. This means everyone will experience the performance boost of DCO without the need to install external components. Additionally, embedded devices like router platforms and development boards that run on Linux will have OpenVPN DCO — ensuring fast performance for years to come.

“Whether your company needs a self-hosted solution like Access Server or a cloud-delivered offering like CloudConnexa, OpenVPN products feature the battle-tested security that businesses of all sizes have relied on for over 20 years,” said Dinha. “The integration directly within Linux ensures speed and performance remain obtainable for businesses without extra steps, keeping productivity and security for all at the forefront.”

To learn more about OpenVPN DCO, visit openv.pn/DCO.

About OpenVPN

OpenVPN's network security solutions provide scalable, secure remote access as a Zero Trust VPN — giving complete freedom to your employees to work outside the office while securely accessing SaaS platforms, the web, and private company resources. OpenVPN’s self-hosted VPN, Access Server, and cloud-delivered CloudConnexa are built on the high-performance, trusted open-source OpenVPN protocol. With over 60 million downloads and nearly 20,000 business customers, OpenVPN products connect your team and resources with security, speed, simplicity.