Kernel & eBPF Networking | VPN Protocols | High-performance Proxy Systems
Building Linux datapaths, VPN/proxy protocols, and cross-platform networking products.
A standalone network data-plane framework rewriting FD.io Vector Packet Processing (VPP) in Rust, with VPP's packet graph and worker ownership model. Under active development.
- Vector packet processing with batched Frames and compact Buffer Indices.
- Worker-owned graph execution, explicit handoff, CPU/NUMA placement, and Buffer Pools.
- Main-thread async Process Nodes, io_uring file scheduling, CLI, and Binary API.
- Session RX/TX FIFOs and message queues, with independent TUN, IP, ICMP, TCP, and iperf3 plugins.
- Shared-memory statistics, packet tracing, and architecture decisions grounded in VPP source.
Architecture and module overview · Architecture decisions
- Container networking datapaths: Docker netkit, eBPF port mapping, SNAT/MASQ, cgroup socket hooks, BIG TCP.
- High-performance packet processing: VPP, XDP/AF_XDP zero-copy, Linux kernel driver work.
- Proxy and VPN systems: QUIC/MASQUE, OpenVPN/IPsec acceleration, sing-box-based desktop clients.
| Project | Description | Stack |
|---|---|---|
| Calamity | macOS & Linux proxy client powered by sing-box, with rule-based routing, TUN, and Tailscale integration | Rust, Tauri 2, React |
| VPP-OpenVPN | High-performance OpenVPN data plane acceleration via VPP, 10x faster | C, VPP |
| StrongSwan-GM | IPsec VPN with Chinese National Cryptography (SM2/SM3/SM4) | C, StrongSwan |
| Docker Netkit eBPF | Docker netkit datapath work: eBPF published-port mapping, egress MASQ, cgroup socket hooks, and BIG TCP validation | Go, C, eBPF |
| Linux vmxnet3 AF_XDP ZC | AF_XDP zero-copy RX/TX ported to VMware's paravirt NIC driver, bisect-safe 7-commit series | C, XDP, Kernel |
