4 ms·

The obvious question, I guess: How much faster are you than whatever is in the Linux kernel's FIB? (Although I assume they need RCU overhead and such. I have no

by Sesse__ 6mo ago

The obvious question, I guess: How much faster are you than whatever is in the Linux kernel's FIB? (Although I assume they need RCU overhead and such. I have no idea what it all looks like internally.)

zx2c4 6mo ago
I likewise wonder from time to time whether I should replace WireGuard's allowedips.c trie with something better: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/net/wireguard/allowedips.c https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
- Sesse__ 6mo ago
  I use Wireguard rarely enough that the AllowedIPs concept gets me every time. It gets easier when I replace it mentally with “Route=” :-)
  - zx2c4 6mo ago
    It's like a routing table on the way out and an ACL on the way in. Maybe an easier way to think of it.
    - Sesse__ 6mo ago
      Sure, but how does this differ from a routing table with RPF (which is default in Linux already)?
      - zx2c4 6mo ago
        It's associated per-peer, so it assures a cryptographic mapping between src ip and public key.