Tech News
← Home  ·  All topics

Udp

5 GoKawiil briefs on this topic

Tailscale details upcoming multi-queue throughput upgrades for subnet routers and exit nodes

Tailscale published a technical update on performance work across its network, including multi-queue support for app connectors, subnet routers, and exit nodes expected in the second half of 2026. The company also previewed throughput and memory overhead improvements coming to upcoming stable client releases, building on prior gains such as 10Gb/s wireguard-go throughput and 4x UDP throughput via segmentation offloads.

Android NAT-T keepalive API lets apps bypass VPN lockdown mode

Security researchers found that Android's public NAT-T socket-keepalive API allows ordinary apps to send UDP packets directly to a router, bypassing Always-on VPN and 'Block connections without VPN' protections. Tests on a Pixel 8 Pro, Samsung SM-F966B, and Nothing A059, all running Android 16, confirmed that keepalive packets reached the physical gateway outside the VPN tunnel, with one device sustaining a leak for over 24 hours. The root cause traces to changes in Android's startNattKeepaliveWithFd function, where validation checks tying the socket to the caller's VPN policy were added and later removed.

New Android VPN Bypass Lets Apps Leak Real IP via Keep-Alive UDP Packets

Security researchers found a flaw in Android's network stack that lets any app, without special permissions, send UDP packets through the device's Wi-Fi or cellular hardware that bypass VPN tunnels entirely. This occurs even when the 'Block all connections without VPN' setting is enabled, exposing a user's real IP address. The bug was reported through Google's Vulnerability Reward Program but closed without action, while GrapheneOS says it is working on a fix.

Proxylity launches DTLS Listeners for serverless encrypted UDP transport

Proxylity introduced DTLS Listeners, a new capability that adds TLS-style encryption and authentication to UDP-based applications without altering their datagram structure. The service handles DTLS 1.2 or 1.3 session negotiation, decrypts incoming data, and forwards plaintext to configured Destinations, encrypting responses before sending them back to the client. Each Listener automatically receives a Proxylity-managed server certificate accessible via a CloudFormation attribute.

Explainer: How Syslog Servers Centralize Network Log Data

A syslog server is a software tool or appliance that collects log messages—covering logins, reboots, firewall denials, hardware failures and more—from routers, switches, servers and other devices across a network. It receives these messages via UDP, TCP or encrypted TLS transport, then stores them in a searchable format organized by source, timestamp, severity and event type.