3 ms·

I wonder why they opted not to use the existing packet transformation code that is already in the kernel? The same code is used as part of linux ipsec implement

• _wmd 9y ago
  The layering inside the kernel is completely different... Kernel Connection Multiplexor Facebook’s primary motivation was to gain access to the un-encrypted bytes in kernel space. KCM is used to decode the framing, and make intelligent scheduling choices, before sending the frames to user space. KTLS sockets are mapped 1:N to user space sockets, where N is the number of user space threads, which are usually mapped to cores. Using this scheme, KTLS + KCM is able to reduce the total number of thread migrations of an individual request