● Covered by 1 source · 1 reportMedium impact1 neutral
Ranet3 Introduces High-Performance Policy-Routed IPsec Mesh SD-WAN
Key points
- Uses standard protocols: IKEv2, ESP, Babel, SRv6.
- Interoperable with strongSwan, BIRD, and Linux kernel seg6local.
- Features latency-based routing via Babel RTT metrics.
- Implements segment routing in userspace for flexible traffic steering.
Introduction to Ranet3
Ranet3 is a new high-performance policy-routed IPsec mesh SD-WAN solution. It is built upon a foundation of standard networking protocols to ensure broad compatibility and robust operation. The project's source code is available on GitHub under FSL-1.1-ALv2 / Apache-2.0 licenses.
Standard Protocol Adherence
The system uses IKEv2 (RFC 7296) with hybrid ML-KEM (FIPS 203) key exchange (RFC 9370) for handshakes and ESP (RFC 4303) in tunnel mode over UDP (RFC 3948) for transport. Routing is handled by an embedded Babel speaker (RFC 8966) incorporating RTT metrics (RFC 9616) and source-specific routes (RFC 9079). Traffic steering is managed via SRv6 (RFC 8986) based on source/destination prefixes.
Interoperability and Compatibility
Ranet3 is designed for interoperability, having been checked against strongSwan for IKEv2 and ESP sessions, BIRD for Babel routes with RTT metrics, and Linux for kernel seg6local actions on SRv6 headers. This allows it to function alongside existing network agents like Tailscale or ZeroTier on the same host, rather than replacing them entirely.
Dynamic Latency Routing
A key feature is its latency-based routing. Babel continuously measures the round-trip time (RTT) of every link, enabling traffic to be routed through relays if a direct link is slower. This dynamic adjustment ensures traffic always takes the fastest available path, adapting to changes in network conditions, packet loss, and outages.
Flexible Segment Routing
Ranet3 implements segment routing in userspace, allowing traffic to be steered through specified waypoints and exits based on source and destination prefixes. This functionality works even on operating systems like macOS, which lack native kernel support for SRv6, offering flexibility in defining traffic paths with user-specified waypoint sequences.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Ranet3 released a new high-performance policy-routed IPsec mesh SD-WAN solution, Ranet3, which utilizes standard protocols like IKEv2, ESP, Babel, and SRv6. This solution aims to offer interoperability with existing network tools and dynamic latency-based routing for optimized traffic paths.