News for hackers. Stuff that matters.

rcsoleng

I leveraged TC-eBPF to build a Plugin TPROXY FW / packet redirector to steer traffic to my target application's dynamically created sockets. Hope others find it useful. Would love to hear how other eBPF developers are making use of eBPF socket steering capabilities.
Re:This is the Way: Invisible Jenkins on Thursday May 26, 2022 @09:04PM (#31525059)

  Preliminary project throughput comparison testing in OCI
  Ziti Tests were run with a single fabric router running in same VCN with either the source or destination ziti endpoints
  Test method: Iperf3 tcp test with default settings with -t set to 60
  Competing technologies were tested with defaults as per published installation instructions
  Investigating as to whether or not stun/direct connect is working for non-ziti technologies and possibly following suboptimal paths” 

   Source         Destination     Ziti Edge Tunnel    Ziti Router    Tailscale    Netmaker     Wireguard     Zero tier     Open Internet

   OCP Singapore  OCP Mumbai      90.9 Mb/s           127 Mb/s       48.6 Mb/s    28.4 Mb/s    23.2 Mb/s     25.5 Mb/s     377Mb/s

   OCP Phoenix    OCP Ashburn     95.6 Mb/s           216 Mb/s       57.7 Mb/s    37.5 Mb/s    35.8 Mb/s     18.5 Mb/s     384 Mb/s

   OCP Singapore  OCP Phoenix     74.7 Mb/s           105 Mb/s       15 Mb/s      16.0 Mb/s    17.7 Mb/s     13.1 Mb/s     115 Mb/s