ICX is a high-performance, kernel-bypass VPN solution for cloud environments.
- UDP/Geneve based.
- Layer 3 tunneling (IPv4 and IPv6).
- Kernel-bypass using AF_XDP.
- AES-GCM-128 crypto with replay protection.
- Cryptokey routing (a la. WireGuard's allowed_ips).
- Control/data-plane separation (like IPsec, allows for pluggable auth).
On Debian you might need to create this symlink to fix bpf compilation issues:
sudo ln -sf /usr/include/$(uname -m)-linux-gnu/asm /usr/include/asmICX is experimental and has not yet undergone a formal security audit or external review. While the design draws from established patterns, the implementation may contain bugs, vulnerabilities, or cryptographic weaknesses.
Use ICX at your own risk.
2 x c7gn.2xlarge instances in the same us-west-2 availability zone with a cluster placement strategy.
