Routing
Encrypted Overlay on the Fast Path
A patched kernel driver lets encrypted overlay peers participate in the same fast path as the rest of the pipeline. Available as an opt-in on bare-metal deployments today.
GA
HOW IT WORKS
Walk through a single flow
- 1The kernel-side driver exposes the encrypted interface as a native fast-path participant.
- 2When opted in, payloads flow directly into the Zedmos engine in userspace — no second socket hop.
- 3Deep packet inspection, policy, and TLS inspection then execute inline, in the same pass as the rest of the traffic.
UNDER THE HOOD
Technical notes
Activation is explicit
Standard SASE deployments default to the kernel socket path for maximum compatibility. Operators opt into the native fast path on bare-metal platforms after validating their driver combination; a guided activation step is part of the platform preflight.