WireGuard: why it's so small
~4k lines, one cipher suite, no negotiation. The design choices that make it auditable.
Posts
The TLS 1.3 handshake, in plain terms
One round trip instead of two, and why the ServerHello already carries a key share.
A first, honest look at io_uring
Two ring buffers, one syscall, and the mental model that finally made it click.
Notes on cgroups v2: memory limits that actually hold
Why my OOM kills moved around after switching to the unified hierarchy, and the three knobs that matter.