Endpoint device for virtual private networks

An endpoint device comprising:

• one or more processors;
• and
• one or more computer-readable media, coupled to the one or more processors and having instructions stored thereon that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving a request to establish a virtual private network (VPN) from a client device;
• authenticating, in user space, the request from the client device;
• and
• performing, by a kernel space process, operations comprising:
• identifying activity at a User Datagram Protocol (UDP) listener socket that is associated with the VPN;
• establishing a UDP tunnel between the endpoint device and the client device by mapping the UDP listener socket to a UDP connection between the endpoint device and the client device;
• receiving Transport Layer Security (TLS) packets from the client device over the UDP tunnel;
• performing TLS operations on the TLS packets independent of a user space application at the endpoint device;
• and
• after performing the TLS operations, forwarding packet data directly into a kernel network stack of the endpoint device.

A computer-program product that includes one or more non-transitory computer-readable media with instructions stored thereon that, when executed by an endpoint device, causes the endpoint device to perform operations comprising:

• receiving a request to establish a virtual private network (VPN) from a client device;
• authenticating, in user space, the request from the client device;
• and
• performing, by a kernel space process, operations comprising:
• identifying activity at a User Datagram Protocol (UDP) listener socket that is associated with the VPN;
• establishing a UDP tunnel between the endpoint device and the client device by mapping the UDP listener socket to a UDP connection between the endpoint device and the client device;
• receiving Transport Layer Security (TLS) packets from the client device over the UDP tunnel;
• performing TLS operations on the TLS packets independent of a user space application at the endpoint device;
• and
• after performing the TLS operations, forwarding packet data directly into a kernel network stack of the endpoint device.