Over view of linux tunnels
summary
Walks through concrete kernel-supported tunnels: ipip and sit for simple IP over IP (sit adds IPv6 support), IPsec modes AH vs ESP for authentication vs full encapsulation, PPP-based PPTP/L2TP tradeoffs, OpenVPN (UDP/SSL) and WireGuard (2015 design, merged 2019) for low-overhead, modern crypto, GRE and ERSPAN for routed and remote port mirroring, UDP-based tunnels for NIC offloads, VXLAN with 24-byte VNI enabling ~16M tenant networks and GENEVE for flexible TLV extension — recommends VXLAN for scale and GENEVE for future extensibility.
AI-written summary · about
chapters (15)
- 0:00Linux tunnels overview
- 1:09What is a tunnel
- 3:02IP over IP tunnels
- 5:14SIT tunnels for IPv6
- 6:40Securing tunnels with IPsec
- 8:05PPTP and L2TP
- 9:56OpenVPN secure VPN
- 10:44WireGuard protocol
- 12:30GRE tunnels
- 14:35ERSPAN monitoring
- 16:05UDP tunnels performance
- 19:03VXLAN for data centers
- 21:52Alternative encapsulation
- 22:34Geneve protocol
- 24:27Choosing tunnels for cloud
related talks
48mWireGuard: Next Generation Abuse-Resistant Kernel Network Tunnel
42mIPsec development for large scale deployments
51mSoftware Defined Networking Using the VXLAN Standard
51mBridges, Bonds, and Taps - Going Beyond eth0
11mRethinking Remote Access in a Remote First World
20mConnecting, Securing and Optimising Enterprise Networks with Free Software
38mHow can a network be "virtual"?
42mAccelerating Envoy with the Linux Kernel