ranet3's userspace IPsec mesh hits 95% of 10 GbE line rate, beating kernel WireGuard
High performance policy routed IPsec mesh SD-WAN
ranet3 is a policy-routed IPsec mesh SD-WAN that uses standard IKEv2, ESP, Babel, and SRv6, so it interoperates with strongSwan, BIRD, and the Linux kernel. Its Babel latency routing continuously measures link RTT and reroutes through relays when the direct path is slower. Benchmarks show its userspace dataplane reaches 8.39 Gbit/s one-way—95% of the 10 GbE payload limit—outperforming kernel WireGuard by 1.6–2.1x and wireguard-go by 1.2–1.5x, though kernel dataplanes still win on p99 latency.
Traffic always takes the fastest path, moving back to the direct link once it is faster again.
- evanjrowley
I'd really like to know what you did to get stable v6. My ISP is also limited in a similar way - no IPv6.
- adulau
Looks cool until I saw the license which is clearly not an open-source license.
- StepBroBD
ranet3 is in the yc winter batch application pool, if you happen to be an investor, lmk i’d be happy to give you a demo!