Skip to content

News and guides

Plain-language guides to online privacy and VPN technology, plus updates from VPNRice.

Linux BPF LSM: Enforcing Kernel-Level Mandatory Access Control on VPN Daemons

Explore Linux BPF LSM security hooks, enforcing kernel-level mandatory access control, cryptographic key protection, and socket sandboxing for zero-trust VPN daemons.

November 12, 2026 · 5 min read

Security
Linux eBPF Sockmap and sk_msg: Socket-to-Socket Redirection for VPN Proxies
November 12, 2026 · 5 min read
Security
Linux Kernel Keyring: Protecting In-Memory Cryptographic Keys for VPN Daemons
November 12, 2026 · 5 min read
Performance
Linux MGLRU and PSI: Preventing Memory Latency Spikes in VPN Gateways
November 12, 2026 · 6 min read
Security
Linux Socket MSG_ZEROCOPY: Eliminating Memory Copy Overhead in VPN Egress
November 12, 2026 · 5 min read
Performance
Linux splice and vmsplice: In-Kernel Zero-Copy Splicing for VPN Relays
November 12, 2026 · 6 min read
Performance
Linux UDP GSO & GRO: Super-Packet Aggregation in High-Throughput VPN Gateways
November 12, 2026 · 6 min read
Protocols
Linux AF_XDP & UMEM: Zero-Copy Userspace Packet Datapaths in VPNs
November 11, 2026 · 4 min read
Protocols
Linux Conntrack Offload: High-Scale eBPF State Tracking for VPN Gateways
November 11, 2026 · 5 min read
Protocols
Linux io_uring vs Epoll: Asynchronous Packet I/O in High-Throughput VPN Engines
November 11, 2026 · 5 min read