About us

We're an established team of technology passionate professionals, who have developed the core of the WAF mentioned in the Gartner Magic Quadrant 2015, MariaDB System-Versioned Tables (the major feature in 10.3, you can watch the fragment of the MariaDB user conference’17 keynote by the CEO of MariaDB corporation about this work), and now kickstarts this crowdfunding campaign for development of the novel type of open source network infrastructure solution.

We believe in fast and secure web for everyone. What is it going to look like? It is going to be an all-in-one open source platform for high performance web content delivery with advanced protection against DDoS and web attacks that everyone can install in a public cloud and build either "their own CloudFlare", a content delivery and filtration network, or a fast and secure single instance VM and keep all the security and application logic inside it.

Tempesta FW

Tempesta FW is our open source hybrid of HTTPS accelerator and a firewall, which is not only x3 faster than Nginx or HAProxy, but also provides advanced protection against application layer DDoS attacks and web attacks.

Tempesta FW can work in the same cloud VM with your application server and database. Or it can be used as a foundation to build CloudFlare-like content delivery and network filtering service.

The Campaign

What makes our dream possible is your input! This is not only about our dream, but the whole Linux community will benefit from it.

We decided to achieve this with the small steps and start from proposing Tempesta TLS for inclusion into the Linux kernel mainstream

All the funds are used solely for the effort to port Tempesta TLS to the Linux kernel upstream. We in turn join forces with you and also fully invest money earned from custom software development into the project.

TLS handshakes acceleration for the Linux kernel

Tempesta TLS is the fastest TLS handshakes implementation. Seems unbelievable? Read our Netdev paper or watch the live demo on our FOSDEM talk.

Our web site https://tempesta-tech.com/ is powered by Tempesta FW, and Tempesta TLS in particular.

Now we're heading the Linux kernel upstream. The kernel TLS handshakes will be coupled with the current kTLS and provide similar API - any user space application working with TLS will be able to benefit from the faster TLS handshakes.

The TODO list for the Linux kernel TLS handshakes:

1. Separate the TLS API from Tempesta FW, https://github.com/tempesta-tech/tempesta/issues/1504
2. Socket API for the Linux kernel TLS handshakes. Fallback to a user space TLS library will not
   be implemented. https://github.com/tempesta-tech/tempesta/issues/1433
3. Integrate with the Linux asymmetric keys API. Most likely the API must be extended since TLS
   requires very sophisticated x509 operations. https://github.com/tempesta-tech/tempesta/issues/1332
4. TLS client side. This requires the user space API to pass IP address as well as the host name
   of the server for the server certificate validation. https://github.com/tempesta-tech/tempesta/issues/769
5. TLS 1.3 handshakes state machine, https://github.com/tempesta-tech/tempesta/issues/1031

Get involved

Your funds help us make more features, implement them faster, and lead the whole project to the production-ready release sooner!

You can unsubscribe from monthly donations at any moment: just send us a request to info@tempesta-tech.com - your donation will be cancelled effective from the new month (your sponsorship status will remain active till the same month end) and no further charges will be made.

To change the sponsorship status please make the donation with another tier selected - your sponsorship status will be altered effective from the new month.