Features
- Supports password authentication (using PAM or a password file) over HTTPS, and certificate authentication.
- Supports both TCP and UDP VPN tunnels using TLS 1.2 and Datagram TLS.
- Support for IPv6 and IPv4.
- Each client is isolated on a separate process, with a separate networking device and IP.
- Privilege separation between the authentication process and the worker processes.
- Support for TCP wrappers (libwrap).
- Registers VPN leases in UTMP and WTMP files.
- Persistent storage of cookies, to allow a seamless server restart.
- Support for the server key being stored in TPM, a hardware security module (HSM), or a smart card.
- No support for compression (If you wonder why this is a feature see technical info).
