ktls-core

Abstraction for implementing Linux kernel TLS (kTLS) offload in Rust.

Overview

This crate provides a low-level interface for setting up kernel TLS (kTLS) regardless of your preferred TLS library.

Implementation Guide

Setting up kTLS generally involves these steps:

1. Creates a TcpStream (or something else like UnixStream).
2. Configures the TLS User Level Protocol (ULP) on the stream.
3. Performs the TLS handshake using your preferred TLS library over the stream.
4. Creates the Stream using the configured stream and crypto materials.

Then you can use the Stream as a drop-in replacement of the original TcpStream.

Kernel Compatibility

We perform daily CI tests against the following kernel versions:

(For LTS kernels, we test against the latest patch version)

For examples and tests details, please refer to the ktls-tests.

License

Licensed under either of:

• Apache License, Version 2.0 (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
• MIT License (LICENSE-MIT or http://opensource.org/licenses/MIT)

at your option.