Ranet3 is a high-performance policy-routed IPsec mesh SD-WAN solution that runs on all machines, including MacBooks. It allows users to configure routable public IP addresses easily, even behind dynamic IPv4 connections like SFR's coaxial service. The tool supports stable v4/v6 addresses for all devices behind the router, with an Android app planned soon.
Ranet3 uses standard protocols like IKEv2, ESP, Babel, and SRv6, ensuring interoperability with strongSwan, Bird, and Linux Kernel seg6. It runs alongside other mesh VPN tools like Tailscale and Net Bird without requiring their agents. Babel measures RTT continuously, routing traffic through the fastest path and switching back when direct links improve.
Segment routing allows policy-based traffic through waypoints, working even on macOS where XNU kernel lacks support. Benchmarks show ranet3 outperforms WireGuard and kernel IPsec in throughput and latency, with userspace dataplanes achieving up to 8.84 Gbit/s and low RTT under saturation.
Source: Hacker News · Summarized by HeadlinesBriefing