4 ms·
This[0] seems to answer your questions. TL;DR: The kernel does it all and passes the unencrypted traffic to the local port specified. There's a command to co
by Mister_Snuggles 9y ago
This[0] seems to answer your questions.
TL;DR: The kernel does it all and passes the unencrypted traffic to the local port specified. There's a command to configure it with the appropriate keys, etc.
[0] http://www.c0t0d0s0.org/archives/5575-Less-known-Solaris-Features-kssl.html http://www.c0t0d0s0.org/archives/5575-Less-known-Solaris-Fea...
- sannee 9y agoSounds like nginx streams - http://nginx.org/en/docs/stream/ngx_stream_core_module.html http://nginx.org/en/docs/stream/ngx_stream_core_module.html . Really useful if you need TLS but the author of whatever you are running couldn't be bothered by adding support (includes being able to do client certificate auth!).
- derefr 9y agoSo, the same API semantics as IPSec transport mode, but not using IPSec. Seems like the best of both worlds, really.