High performance policy routed IPsec mesh SD-WAN
ranet3 presents a novel approach to high-performance, policy-routed IPsec mesh SD-WAN, leveraging standard protocols like IKEv2, Babel, and SRv6 for broad interoperability. Its standout feature is intelligent, latency-aware routing combined with segment routing, allowing for highly optimized traffic paths. This deep dive into network architecture and performance benchmarks appeals to HN's core interest in technical innovation and efficiency in infrastructure.
The Lowdown
ranet3 introduces an open and high-performance SD-WAN solution designed to create policy-routed IPsec meshes. Unlike many proprietary alternatives, ranet3 emphasizes interoperability by relying solely on standard protocols, allowing it to function alongside existing VPN tools. Its core innovation lies in dynamic, latency-driven routing and advanced segment routing capabilities, promising optimized network performance for complex deployments.
- Standard Protocols: ranet3 uses IKEv2, ESP, Babel, and SRv6, ensuring compatibility with a wide range of existing networking hardware and software like strongSwan, BIRD, and Linux kernels with
seg6local. This design allows it to coexist with other mesh VPNs on the same host, avoiding vendor lock-in. - Latency Routing: Utilizing Babel, ranet3 continuously measures Round Trip Time (RTT) across all links. It dynamically routes traffic through relay nodes if direct links are slower or experience packet loss, ensuring data always takes the fastest available path.
- Segment Routing: The system supports policy-based segment routing, allowing users to define specific waypoints and exit points for traffic, even enabling complex routes with repeating waypoints. This functionality is implemented in userspace, providing broad compatibility, including on macOS.
- Performance Benchmarks: ranet3 demonstrates impressive throughput, achieving 95% of a 10 GbE payload limit (8.39 Gbit/s) with a single stream. It significantly outperforms kernel WireGuard (1.6-2.1x) and wireguard-go (1.2-1.5x) in throughput tests, all while maintaining low RTTs under saturation. Detailed results show lower CPU cost per Gbit/s compared to alternatives.
ranet3 positions itself as a robust, open, and high-performance alternative in the SD-WAN space, focusing on interoperability through standard protocols and intelligent routing to deliver superior network efficiency. Its impressive benchmark results against established solutions highlight its potential for demanding network environments.