On 08/03/2021 08:06, Arne Schwabe wrote:
Looking at this feature from today's perspective, it feels like one of OpenVPN's boutique features. Was probably useful at some point but doesn't really make much sense today anymore. Esepcially with what is written in the manpage. Today you rather would use full disk encryption or disable swapping rather than to rely on OpenVPN's --mlock. That being said I am against your patch, I am just wondering if that is a feature we need to keep at all.
Having all openvpn data remain permanently in memory also offers a (small) performance boost. Your alternative offers would impact performance and be system wide. Therefore, I for one disagree. -- _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
