A high-performance policy-routed IPsec mesh SD‑WAN implements a userspace Transport ESP tunnel over UDP with IKEv2 handshake and a hybrid ML‑KEM key exchange, an embedded Babel routing speaker measuring per-link RTTs and supporting source-specific routes, and SRv6 steering by source/destination prefix. Peers require only standard IKEv2, ESP, Babel and SRv6 and interoperate with strongSwan (Ed25519 keys), BIRD (Babel RTT routes) and Linux seg6local; the stack runs alongside other mesh agents and implements segment-routing in userspace so it works on systems without native kernel support (e.g., macOS). Waypoint policies can sequence arbitrary waypoints and exits (A→B→C→B→D).
Performance testing on a two-host 10 GbE testbed (Dell PowerEdge C6420, Xeon Gold 6130, Debian 13, Linux 6.12.11) shows userspace ranet3 achieves 8.39 of 8.84 Gbit/s (95% of the 10 GbE payload limit) on a single one-way stream and sustains similar performance with multiple streams. Across six tests ranet3 is 1.2-1.5× faster than wireguard‑go, 1.6-2.1× faster than kernel WireGuard and 1.8-3.9× faster than kernel IPsec; p99 latency under saturation was 1.91-4.96 ms, and CPU cost at 3 Gbit/s averaged ~0.9 busy cores per Gbit/s. Measurements used iperf3 with inner MTU 1400, one and eight streams, medians of three runs.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Netflix has laid off about 6% of its staff in its largest job reduction since 2022. The layoffs are likely driven by slowing year-over-year growth and impact senior and staff-level roles. (wsj.com)
A man seeks remote work opportunities to support his father, who has two years to live, and fulfill his father's dream of a cross-country trip. He offers extensive programming skills despite lacking formal employment history, asking for a chance to avoid repeating past regrets. (news.ycombinator.com)
Tiny Brutalism is a sandbox simulation game focused on building brutalist-style structures without specific goals. Players can create abstract monuments and explore them in first person, emphasizing relaxation and creativity. (store.steampowered.com)
HOA and condo associations in Florida are contributing to the housing crisis by filing thousands of foreclosure suits, liens, and claims against homeowners, often over small debts. These actions worsen the availability and affordability of homes, with associations frequently foreclosing on their own members for unpaid dues. (hoaspy.com)
Anthropic is creating the Public Benefit Fund, committing a portion of its shares to support AI safety, research, and social impact initiatives. The fund's size will grow as the company increases in value, enabling flexible philanthropy and public good efforts. (anthropic.com)
PalmOS Lemmings is a recreation of the classic game for PalmOS, available on GitHub with source code, images, and level packs. The project allows users to experience the game on older PalmOS devices or emulators. (github.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.