Skip to content

News and guides

Plain-language guides to online privacy and VPN technology, plus updates from VPNRice.

WireGuard Kernel Token Bucket Rate Limiting: Defeating Handshake Floods

Explore WireGuard's ratelimiter.c, detailing in-kernel token bucket algorithms, SipHash-keyed IP tracking tables, and defense against handshake CPU exhaustion.

November 10, 2026 · 7 min read

Security
WireGuard Index Hashtables: O(1) Lockless Lookups and Hash-DoS Defense
November 10, 2026 · 6 min read
Security
WireGuard Silent Mode: Zero-Response Defense Against Probing and DPI
November 10, 2026 · 7 min read
Security
BLAKE2s in WireGuard: High-Speed Cryptographic Hashing and Keyed MAC
November 10, 2026 · 6 min read
Security
ChaCha20-Poly1305 AEAD: ARX Cipher Design & Side-Channel Immunity in VPNs
November 10, 2026 · 6 min read
Security
WireGuard Curve25519 & Montgomery Ladder: Side-Channel Defense in VPNs
November 10, 2026 · 6 min read
Protocols
WireGuard fwmark & Policy Routing: Preventing Tunnel Loops in Linux VPNs
November 10, 2026 · 7 min read
Security
WireGuard TAI64N Timestamps: Handshake Replay Defense in VPN Networks
November 10, 2026 · 6 min read
Performance
WireGuard Parallel Crypto: In-Kernel Queues and Multicore padata in VPNs
November 10, 2026 · 5 min read
Protocols
QUIC Preferred Address: Server Migration & Anycast Handoff in VPNs
November 10, 2026 · 4 min read