🛡️ Security

Kernel TLS (kTLS)

A Linux kernel feature that performs TLS record encryption and decryption inside the kernel after a userspace library completes the handshake, enabling zero-copy sends and NIC offload at the cost of running the record parser in ring 0.

📚 Deep Dive

Learn Article

How Kernel TLS Moves Encryption Into the Kernel and What That Exposes

Kernel TLS trades a process boundary for throughput: the record parser that handles every byte a remote peer sends runs in ring 0. Here is what that buys, what it costs, and how to tell if you use it.

intermediate 6 min read

Back to Glossary