Up: Additional Features   [Contents][Index]


G.1 kTLS (Kernel TLS)

kTLS (Kernel TLS) is a Linux kernel feature that offloads TLS encryption and decryption operations to the kernel space, improving performance and reducing CPU overhead. It allows applications to leverage zero-copy data transmission, reducing context switches between user space and kernel space.

The following table shows how to enable kTLS support on Linux and FreeBSD systems.

DescriptionLinuxFreeBSD
Load kernel modulemodprobe tlskldload tls
Check if module is loadedlsmod | grep tlskldstat | grep tls
kTLS rekey supportv6.14not yet supported

Table G.1: kTLS system enable

To enable ktls in GnuTLS Enabling kTLS.