KTLS example

Prerequisite

• linux 4.13 or above
• openssl 1.0.x

Generate self-signed certificate

$ openssl ecparam -out key.pem -genkey -name prime256v1
$ openssl req -x509 -new -key key.pem -out cert.pem

Run the binaries

$ make
$ dd if=/dev/zero of=.dd.test bs=1M count=512
$ ./ktls_sendfile 127.0.0.1 .dd.test 
start do_sendfile(.dd.test)
sendfile cost time: 2.27
end do_sendfile(.dd.test)
checksum(.TMP_ktls): aa559b4e3523a6c931f08f4df52d58f2
checksum(.dd.test): aa559b4e3523a6c931f08f4df52d58f2 

Reference

• djwatson/ktls
• ktls/afi_ktls-tool
• include/uapi/linux/tls.h
• linux/Documentation/networking/tls.txt
• TLS: Linux Kernel Transport Layer Security - NetDev
• Playing with kernel TLS in Linux 4.13 and Go - Filippo.io