SECURITY Signal 462
Proxylity adds serverless DTLS Listeners for encrypted UDP traffic
↗
Illustration only Photo by NASA on Unsplash
Proxylity’s UDP gateway now offers DTLS Listeners that terminate DTLS 1.2/1.3 sessions and forward plaintext to destinations.
Engineers can protect UDP-based protocols such as RADIUS, IoT telemetry, or custom request-response flows without rewriting them as stream-oriented connections. The listeners integrate with AWS CloudFormation and expose managed certificates and PSK options, simplifying deployment while preserving datagram boundaries. However, the feature cannot be mixed with plain UDP or WireGuard listeners and requires client-side DTLS support.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
DTLS Listeners provide TLS-style encryption and authentication for UDP while keeping the datagram transport model intact.
Authentication can use a server-managed certificate, pre-shared keys stored in Secrets Manager, or cookie protection, all configurable via CloudFormation.
Advanced options include DTLS 1.3 session tickets, 0-RTT early data, and DTLS 1.2 Connection IDs, but listeners cannot be combined with plain UDP or WireGuard on the same endpoint.
THE CLUSTER