Skip to content

News and guides

Plain-language guides to online privacy and VPN technology, plus updates from VPNRice.

Linux AF_XDP & UMEM: Zero-Copy Userspace Packet Datapaths in VPNs

Deep dive into Linux AF_XDP (XSK), zero-copy UMEM memory pools, four lockless circular ring queues, and wire-speed userspace packet processing in VPN gateways.

November 11, 2026 · 4 min read

Protocols
Linux Conntrack Offload: High-Scale eBPF State Tracking for VPN Gateways
November 11, 2026 · 5 min read
Protocols
Linux io_uring vs Epoll: Asynchronous Packet I/O in High-Throughput VPN Engines
November 11, 2026 · 5 min read
Protocols
WireGuard Generic Netlink: Lockless Kernel IPC & Zero-Downtime Peers
November 10, 2026 · 5 min read
Security
WireGuard Stateless Cookies: Dual-Tier MAC Defense in Kernel
November 10, 2026 · 5 min read
Security
WireGuard Kernel Token Bucket Rate Limiting: Defeating Handshake Floods
November 10, 2026 · 7 min read
Security
WireGuard Index Hashtables: O(1) Lockless Lookups and Hash-DoS Defense
November 10, 2026 · 6 min read
Security
WireGuard Silent Mode: Zero-Response Defense Against Probing and DPI
November 10, 2026 · 7 min read
Security
BLAKE2s in WireGuard: High-Speed Cryptographic Hashing and Keyed MAC
November 10, 2026 · 6 min read
Security
ChaCha20-Poly1305 AEAD: ARX Cipher Design & Side-Channel Immunity in VPNs
November 10, 2026 · 6 min read