overview
A VPN technology provider in the USA partnered with Mandelbit to design and upstream a new Linux kernel module aimed at accelerating the OpenVPN data plane. By combining deep networking expertise with open-source community management skills, Mandelbit successfully designed, refined, and shepherded the module into the official Linux kernel.
client profile
industry
VPN technology
size
Mid-sized, USA-based service provider
focus
Developing secure networking products requiring high-performance VPN data planes
challenge
The customer wanted to develop a new Linux kernel module to speed up the OpenVPN data plane, but faced several obstacles:
- Upstream inclusion needed: it was critical for the module to be merged into the official Linux kernel to ensure maintainability and broad adoption.
- Rare skill set: developing such a module required a blend of deep networking knowledge, Linux kernel development skills, and open-source community management expertise – a rare combination in the market.
Mandelbit’s solution
Mandelbit embraced the task with a structured approach:
1. Initial design & prototype
- Designed the kernel module and built a preliminary prototype.
- Presented the prototype to the Linux kernel community for early feedback.
2. Refinement & community collaboration
- Collected and incorporated community feedback into a more sophisticated version of the module.
- Submitted the module via the standard Linux kernel mailing list for detailed review.
3. Iterative review process
- Addressed maintainers’ feedback through multiple iterations.
- Ensured compliance with kernel coding standards and community expectations until the module reached full acceptance.
results
- Successful upstream merge: the kernel module was officially merged upstream as of Linux 6.16.
- High-performance VPN data plane: enhanced OpenVPN throughput for the client’s products and the broader community.
- Sustainable maintenance: by being part of the official Linux kernel, the module benefits from ongoing community support and long-term maintainability.
client impact
The client was enthusiastic about Mandelbit’s work and appointed the company as the main maintainer of the module, establishing an ongoing partnership to ensure future enhancements and support.
key takeaways
By combining advanced Linux kernel development, networking expertise, and open-source community engagement, Mandelbit enabled a VPN technology provider to achieve a milestone rarely seen in the industry: a new kernel module merged into the official Linux tree, ensuring high performance and sustainability for years to come.