netstack.fm

Plabayo BV

A podcast about networking, Rust, and everything in between. Join us as we explore the stack: from protocols and packet flows to the people and projects building the modern internet — all through the lens of Rust. Featuring deep dives, crate spotlights, and expert interviews.

  1. 12 HR AGO

    GraphQL and Rust with Tom Houlé

    episode 21 — GraphQL and Rust with Tom Houlé. In this episode of Netstack.fm, Glen and Tom Houlé discuss GraphQL's transition from a high-hype mobile data solution at Facebook to a mature enterprise technology. They explore technical challenges like the N+1 problem and persisted queries, as well as the rise of GraphQL Federation for unifying microservices in Rust-based gateways. Tom also highlights GraphQL’s future potential as a self-documenting interface for LLMs and its healthy, community-driven development. Learn more: https://www.tomhoule.com — Personal website of Tom Houléhttps://graphql.org/learn/ — Learn GraphQLhttps://www.jovidecroock.com/blog/graphql-myths/ — GraphQL Myths (about trusted documents — Jovi De Croock)https://benjie.dev/graphql/trusted-documents — Another great blog post about trusted documents, by Benjiehttps://www.apollographql.com/docs/graphos/schema-design/federated-schemas/federation — Introduction to GraphQL Federation (Apollo)https://github.com/graphql/composite-schemas-spec/ — The Composite Schemas specification, the vendor neutral next iteration of federationhttps://www.youtube.com/watch?v=E_RETbpPogw — Transforming Capital One’s Data Marketplace with Embedded Governance and a Product Mindset (enterprise adoption)https://relay.dev/docs/ — Relay docsRust Crates:https://github.com/async-graphql/async-graphql — async-graphql, the server frameworkhttps://github.com/graphql-rust/graphql-client/ — graphql-clienthttps://github.com/obmarg/cynic — cynichttps://www.youtube.com/@GraphQLFoundation — @GraphQLFoundation on YouTubehttps://www.youtube.com/@graphqltv — @GraphQL TV on YouTubehttps://grafbase.com/blog/seamless-grpc-subgraphs-with-extensions-and-composite-schemas — Seamless gRPC subgraphs with extensions and composite schemas Chapters 00:00 Intro00:39 Meet Tom Houlé03:24 Origins of GraphQL10:05 The Shift to Persistent Queries in GraphQL18:09 GraphQL's Role in Frontend and Backend Development21:11 Challenges and Criticisms of GraphQL24:07 Optimizing GraphQL for Performance35:06 Schema first vs Code first40:44 Optimizing GraphQL Server Query Implementations44:39 GraphQL Federation: A Unified Approach51:08 Authentication in GraphQL: Challenges and Solutions01:05:23 The Future of GraphQL: Trends and Innovations01:16:03 Outro Netstack.FM More information: https://netstack.fm/#episode-21Join our Discord: https://discord.gg/29EetaSYCDReach out to us: hello@netstack.fm Music for this episode was composed by Dj Mailbox. Listen to his music at https://on.soundcloud.com/4MRyPSNj8FZoVGpytj

    1h 17m
  2. 23/12/2025

    Firezone and Zero-Trust Network Security with Thomas Eizinger

    episode 19 — Firezone and Zero-Trust Network Security with Thomas Eizinger. In this episode of Netstack.fm, Glen talks with Thomas Eizinger from Firezone about designing a zero trust enterprise VPN built on top of WireGuard. They break down how modern VPNs work in practice, covering virtual network adapters, split tunneling, DNS interception, policy based access, and secure packet routing using WireGuard, ICE, and TURN relays. The discussion highlights how Firezone differs from legacy VPNs by focusing on performance, reliability, and minimal user friction, while also touching on the role of Rust and Elixir in Firezone’s architecture and the long term importance of IPv6 adoption. Learn more: https://github.com/firezone/firezone — Firezone main repositoryhttps://github.com/firezone/firezone/tree/main/rust/relay/ebpf-turn-router — Firezone eBPF in kernel relay routerhttps://www.firezone.dev/kb/architecture/critical-sequences#detailed-connection-setup — Firezone Connection Setuphttps://www.wireguard.com/papers/wireguard.pdf — WireGuard whitepaperhttps://github.com/firezone/boringtun — Firezone fork of boringtun user space WireGuardhttps://www.rfc-editor.org/rfc/rfc8656 — TURN RFC 8656https://x.com/firezonehq — Firezone on Xhttps://x.com/oetzn — Thomas Eizinger on Xhttps://hachyderm.io/@wheezle — Thomas Eizinger on Mastodonhttps://github.com/thomaseizinger — Thomas Eizinger on GitHub Rama If you like this podcast you might also like our modular network framework in Rust: https://ramaproxy.org Chapters 00:00 Intro00:42 Introduction to Thomas Eizinger05:19 Firezone's Turn implementation11:00 Understanding VPNs and Firezone's Approach29:27 Legacy VPNs vs. Firezone: A New Era of Networking36:19 Firezone is opensource37:27 Zero-Trust VPNs40:28 What is WireGuard43:36 Firezone's Integration with WireGuard50:19 Handling Connection Failures58:00 Geolocation and Relay Selection01:04:45 Elixir Developer Experience (DX)01:10:19 IPv6 Adoption and Future Considerations01:15:03 Outro Netstack.FM More information: https://netstack.fm/#episode-19Join our Discord: https://discord.gg/29EetaSYCDReach out to us: hello@netstack.fm Music for this episode was composed by Dj Mailbox. Listen to his music at https://on.soundcloud.com/4MRyPSNj8FZoVGpytj

    1h 16m
  3. 09/12/2025

    Early Web History and Interlisp with Larry Masinter

    episode 17 — Early Web History and Interlisp with Larry Masinter. We sit down with internet pioneer and longtime IETF contributor Larry Masinter to revisit the origins of many technologies developers use every day. From his early days at Xerox PARC to co-authoring foundational RFCs on HTTP, URIs, and more, Larry shares first-hand stories that connect the early web to the world we build in now. The conversation also explores his current passion project: reviving the Interlisp environment as a living historical system. Learn more: https://larrymasinter.net/ — Official website from Larry Masinterhttps://www.rfc-editor.org/rfc/rfc2616 — RFC 2616 – HTTP/1.1 Specificationhttps://www.rfc-editor.org/rfc/rfc3986 — RFC 3986 – URI Generic Syntaxhttps://www.rfc-editor.org/rfc/rfc2324 — RFC 2324 – Hypertext Coffee Pot Control Protocolhttps://www.rfc-editor.org/rfc/rfc2732 — RFC 2732 – Literal IPv6 Addresses in URLshttps://datatracker.ietf.org/doc/html/draft-masinter-dated-uri — Draft: the 'tdb' and 'duri' URI schemes, based on dated URIshttps://interlisp.org — The Interlisp Revival Project Rama If you like this podcast you might also like our modular network framework in Rust: https://ramaproxy.org Chapters 00:00 Intro00:34 Introduction to Larry Masinter05:32 The Intellectual Environment at Xerox PARC06:49 The Interlisp Project and Its Impact10:05 Transitioning to Document Servers and HTTP12:02 Resources, Gopher and the Early Web15:45 Why did HTTP succeed where Gopher faded away20:56 Larry's Involvement in Web Standards and Protocols25:11 Reviving Interlisp post-pandemic27:13 interlisp.org, 5 years later32:57 The Tradition of April 1st RFCs33:51 Invention of Hypertext Coffee Pot Control Protocol (1998)37:04 The Invention of HTCPCP40:55 Exploring URI Schemes47:58 Form-Based File Upload49:12 The Politics of Web Standards01:05:12 The Evolution of Web Protocols01:05:53 Developing in the Interlisp Environment01:14:03 Goals of the Interlisp Revival Project01:23:39 Collaborations and Future Aspirations01:25:09 Outro Netstack.FM More information: https://netstack.fm/#episode-17Join our Discord: https://discord.gg/29EetaSYCDReach out to us: hello@netstack.fm Music for this episode was composed by Dj Mailbox. Listen to his music at https://on.soundcloud.com/4MRyPSNj8FZoVGpytj

    1h 26m
  4. 02/12/2025

    WebRTC and Sans IO with Martin Algesten

    episode 16 — WebRTC and Sans IO with Martin Algesten. We sit down with Rust developer Martin Algesten for a deep dive into WebRTC and the Sans IO approach to protocol design. Martin traces the surprising origins of WebRTC, explains why real time media over UDP is both powerful and painfully complex, and walks through how peer to peer connections work under the hood. The conversation then shifts to Sans IO design, why it matters for clean protocol implementations in Rust, and how Martin applies it in his own WebRTC stack, str0m. Learn more: https://github.com/algesten — Github profile of Martin Algestenhttps://github.com/algesten/str0m — A Sans I/O WebRTC implementation in Rusthttps://github.com/algesten/dimpl — DTLS 1.2 implementation (Sans‑IO, Sync)https://datatracker.ietf.org/doc/rfc8489/ — Session Traversal Utilities for NAT (STUN)https://datatracker.ietf.org/doc/rfc8656/ — Traversal Using Relays around NAT (TURN)https://www.w3.org/TR/webrtc/ — WebRTC: Real-Time Communication in Browsers Rama If you like this podcast you might also like our modular network framework in Rust: https://ramaproxy.org Chapters 00:00 Intro00:40 Get to know Martin Algensten06:16 A bit of WebRTC history09:38 WebRTC 10130:05 P2P and Stun36:00 WebRTC: stages and flow from start to finish45:43 How Martin got into WebRTC and started the str0m project52:36 What is Sans IO?01:06:36 Why DTLS is not Sans IO in Str0m, but Str0m is01:18:34 Outro Netstack.FM More information: https://netstack.fm/#episode-16Join our Discord: https://discord.gg/29EetaSYCDReach out to us: hello@netstack.fmMusic for this episode was composed by Dj Mailbox. Listen to his music at https://on.soundcloud.com/4MRyPSNj8FZoVGpytj

    1h 20m
  5. 25/11/2025

    Pingora with Edward and Noah from Cloudflare

    episode 15 — Pingora with Edward and Noah from Cloudflare.In Episode 15 of netstack.fm, Glen sits down with Edward and Noah from Cloudflare to unpack the design of Pingora, the Rust based proxy framework that now powers Cloudflare’s origin facing traffic. The discussion covers why Cloudflare moved away from NGINX, how Pingora differs from Oxy, and what it takes to operate a high performance global proxy at massive scale. Listeners will learn about connection reuse strategies, dynamic traffic handling, gRPC and protocol translation, custom HTTP implementations, TLS backend choices, and the practical trade offs of Rust, Tokio, and work stealing in real production systems. It is an episode full of deep technical insights into building and operating modern networking infrastructure. Learn more: https://blog.cloudflare.com/how-we-built-pingora-the-proxy-that-connects-cloudflare-to-the-internet/ — Pingora's introduction bloghttps://blog.cloudflare.com/pingora-open-source/ — Pingora launch blog post (Cloudflare)https://github.com/vicanso/pingap — pingap, built on top of pingorahttps://blog.cloudflare.com/road-to-grpc/ — Cloudflare gRPC and gRPC Web articlehttps://github.com/hyperium/h2 — Hyperium h2 cratehttps://github.com/cloudflare/quiche — Quiche (QUIC and HTTP3 implementation)https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ — Cloudflare Rapid Reset HTTP2 attack analysishttps://csrc.nist.gov/pubs/fips/140-3/final — NIST FIPS 140-3 publicationhttps://blog.cloudflare.com/introducing-oxy/ — Introducing Oxy (Cloudflare)https://blog.cloudflare.com/oxy-extensibility/ — Oxy's extensions via genericshttps://blog.cloudflare.com/20-percent-internet-upgrade/ — Oxidizing other CDN components for performancehttps://github.com/cloudflare/foundations — Cloudflare's foundations crate Rama If you like this podcast you might also like our modular network framework in Rust: https://ramaproxy.org Chapters 00:00 Intro00:37 A bit of background on the episode and our guests03:18 The Evolution of Proxy Frameworks: Oxy vs. Pingora14:59 The Philosophy Behind Pingora's Design20:53 Understanding Pingora's Bare Bones Structure27:50 Metrics and Observability in Pingora39:19 Caching Strategies and Backend Structures42:56 Usage of OnceCell45:39 TLS Implementations and Their Importance50:51 Dynamic Traffic Management and gRPC Support01:02:10 Optimizing Connection Reuse with Pingora01:07:10 The Importance of Layer 7 Processing01:11:16 The Shift from Static to Dynamic Web Traffic01:18:48 Performance Improvements with Rust and Tokio01:26:00 Memory Management and Allocation Strategies01:37:59 Outro Netstack.FM More information: https://netstack.fm/#episode-15Join our Discord: https://discord.gg/29EetaSYCDReach out to us: hello@netstack.fm Music for this episode was composed by Dj Mailbox. Listen to his music at https://on.soundcloud.com/4MRyPSNj8FZoVGpytj

    1h 39m
  6. 18/11/2025

    Roto And Cascade with Terts and Arya from NLnet Labs

    Episode 14 – Roto And Cascade with Terts and Arya from NLnet Labs. In this episode we have a conversation with Terts and Arya from NLnet Labs. Together we explore their paths into systems programming, the mission of NLnet Labs, and the critical internet infrastructure the organization maintains. The discussion spans DNSSEC, large scale DNS operations, Rotonda, and the Roto scripting language, with deep dives into performance engineering, zero copy design, and building resilient open source networking software. It is a technical episode that highlights the people and ideas behind essential internet protocols. Learn more: https://www.nlnetlabs.nl/ — NLnet Labs websitehttps://github.com/NLnetLabs/cascade — A friendly DNSSEC signing solutionhttps://indico.dns-oarc.net/event/55/contributions/1186 — slides of conference talk introducing Cascadehttps://github.com/NLnetLabs/rotonda — Modular, programmable BGP Enginehttps://github.com/NLnetLabs/roto — strongly-typed, compiled embedded scripting language for Rusthttps://www.youtube.com/watch?v=7xJEFPlfy7Y — EuroRust 2025 talk by Terts on Rotohttps://docs.rs/domain/latest/domain/new/base/wire/index.html — domain's zerocopy modulehttps://bal-e.org/blog/ — Blog from Aryahttps://2026.rustweek.org/ — RustWeek 2026 (with open CFP until EOY 2025) Rama If you like this podcast you might also like our modular network framework in Rust: https://ramaproxy.org Chapters 00:00 Intro01:14 Backgrounds of Terts and Arya10:37 Overview of NLnet Labs17:43 Understanding DNSSEC25:29 The Role of Cascade in DNSSEC41:06 Understanding Roto and Rotonda45:55 The Evolution of Roto's Scripting Language49:34 Integration and Efficiency in Roto52:05 Real-World Applications of Roto01:00:36 The Importance of Data Structures in Performance01:06:34 Optimization Strategies for High Performance01:17:14 Zero-Copy Techniques in DNS Handling01:26:06 Outro Netstack.FM More information: https://netstack.fm/#episode-14Join our Discord: https://discord.gg/29EetaSYCDReach out to us: hello@netstack.fm Music for this episode was composed by Dj Mailbox. Listen to his music at https://on.soundcloud.com/4MRyPSNj8FZoVGpytj

    1h 27m

About

A podcast about networking, Rust, and everything in between. Join us as we explore the stack: from protocols and packet flows to the people and projects building the modern internet — all through the lens of Rust. Featuring deep dives, crate spotlights, and expert interviews.

You Might Also Like