GSM gold starGSM Global
中文版 · Chinese

Niagara Networks of Fremont, California Adds TLS 1.3 Decryption With ECH Awareness and Post-Quantum Key Exchange to ePacketron: Over 90 Gbps Throughput and Up t

Monday, November 9, 2026 · Tech · GSM News

FREMONT, California — Niagara Networks, a Silicon Valley network visibility and traffic delivery company, announced on November 9 the addition of TLS 1.3 decryption capabilities to its ePacketron platform, expanding encrypted traffic visibility with Encrypted Client Hello (ECH)-aware selective inspection, post-quantum cryptography (PQC) support and high-performance TLS processing. According to the company's own performance tests, the solution achieves TLS decryption throughput of over 90 Gbps, supports up to 110,000 new decrypted TLS sessions per second, and scales to 1 million concurrent decrypted sessions.

The release said ECH, defined by RFC 9849, protects sensitive TLS handshake information including the true destination hostname, undermining traditional passive monitoring and hostname-based security policies. Instead of blocking ECH or downgrading connections to non-ECH TLS, ePacketron is designed to maintain ECH-aware negotiation on supported enterprise-managed clients while enabling authorized, policy-based inspection where enterprise certificate trust and client compatibility allow. On post-quantum cryptography, the engine supports hybrid TLS 1.3 key exchange using X25519MLKEM768 as the preferred configuration, combining traditional X25519 with ML-KEM-768, and also supports ML-KEM-1024 with compatible peers. The platform enables policy-based selective inspection — decryption, logging, blocking or encrypted bypass — and integrates with the company's packet broker architecture to deliver selected decrypted traffic to existing NDR, IDS/IPS, SOC and NOC monitoring platforms. The release said the ePacketron acceleration architecture delivers advanced Layer 4–7 packet processing up to 600 Gbps through a dedicated Network Intelligence layer.

Founder and Chief Executive Ben Askarinam said in the release that the pace of encryption evolution has outstripped traditional network visibility architectures, and that the new capabilities extend ePacketron from traditional packet brokering to next-generation Network Intelligence. Vitaliy Ivanov, Vice President of Software Engineering, said modern TLS 1.3 inspection requires not only raw decryption throughput but also compatibility with emerging encryption standards, scalable session handling and intelligent traffic processing. The enhanced capabilities were released on the ePacketron platform with FabricFlow version 12.14, and the company will demonstrate the solution at Cisco Live Melbourne from November 9 to 12, 2026, at booth B14. The release gave no licensing price for the new capability.

—-

Source: Niagara Networks (company

Published by GSM · USA (original Chinese edition)

Photo: 光纤线缆特写(资料图)。(Wikimedia Commons/CC BY-SA 3.0 au)|A fibre optic cable close-up (file photo). (Wikimedia Commons / CC BY-SA 3.0 au)

Latest in Tech