Amnesic-Systems / nitriding

Tool kit for building secure, scalable, and networked services on top of AWS Nitro Enclaves.
Mozilla Public License 2.0
2 stars 2 forks source link

Replace gvproxy with custom, tun-based proxy. #17

Closed NullHypothesis closed 8 months ago

NullHypothesis commented 8 months ago

We don't need gvproxy's nifty features; all we need is a fast forwarding proxy. This commit replaces the tap networking code with tun-specific code that's exposed in the nitriding-proxy package.

Nitriding-proxy already outperforms gvproxy in iperf3 tests. There's quite some room for improvement still, by taking advantage of TCP segment offloading etc.

This fixes https://github.com/Amnesic-Systems/nitriding/issues/14.