Open Mesh SD-WAN Challenges Proprietary Connectivity Norms

While major telecom providers often rely on proprietary lock-in, the emergence of open-standard connectivity tools suggests a shift toward architectural freedom. As reported by ranet3, the project provides a high-performance policy routed IPsec mesh SD-WAN that prioritizes interoperability over proprietary constraints.

Unlike common mesh VPN and SD-WAN tools such as Tailscale, NetBird, ZeroTier, and Nebula—which ranet3 notes only admit nodes running their own specific agents—ranet3 utilizes standard protocols. These include IKEv2 for handshakes, ESP for transport, Babel for routing, and SRv6 for steering. This allows it to interoperate with other routers or switches supporting these standards, including strongSwan and BIRD.

Benchmarks conducted on 2026-10-15 using Dell PowerEdge C6420 hardware show that ranet3's userspace dataplane can reach 95% of the 10 GbE payload limit (8.39 of 8.84 Gbit/s) in a one-way single stream. Ranet3 reports that its throughput is 1.6-2.1x better than kernel WireGuard and 1.2-1.5x better than wireguard-go across six tests. Additionally, the system uses Babel to continuously measure round-trip time (RTT), automatically routing traffic through relays if a direct link becomes slower due to packet loss or outages.

Further technical capabilities include segment routing implemented in userspace, which enables functionality on macOS despite the XNU kernel lacking native support. The project is released under FSL-1.1-ALv2 and Apache-2.0 licenses and currently powers AS10779 and AS18932.