Proxylity Introduces Serverless DTLS Listeners for Encrypted UDP Applications

Introduction of DTLS Listeners

Proxylity has released DTLS Listeners, which integrate TLS-style encryption and authentication into UDP applications. This new feature allows applications to secure their UDP communications while preserving the datagram transport model, which is crucial for certain protocols.

Application and Use Cases

DTLS Listeners are designed for applications that already support DTLS or require encrypted UDP transport while maintaining datagram boundaries. Common examples include RADIUS, various IoT protocols, real-time telemetry systems, and custom request-response protocols that cannot utilize stream-oriented TLS connections.

Technical Details and Configuration

The service supports DTLS 1.2 and DTLS 1.3 sessions. Proxylity manages server certificates and private keys for each DTLS Listener, which are accessible via the DtlsServerCertificate CloudFormation attribute. Users can configure DTLS-PSK by providing client identities and base64-encoded keys, and enable `RequireCookies` to mitigate amplification and resource-exhaustion risks for public endpoints. DTLS 1.3 clients can also use encrypted session tickets for faster session resumption.