The Samba team at SerNet has completed two key milestones in the ongoing development of SMB over QUIC for Samba. The technology promises secure, high-performance access to file servers across untrusted networks. These developments are part of the project funded by the Sovereign Tech Agency (STA). The STA supports critical open-source infrastructure to strengthen digital sovereignty and resilience.
Milestone 5.1: Enable QUIC transport in Samba smbd
Samba now supports listening on UDP port 443, enabling a QUIC-based alternative to traditional TCP connections (ports 445 and 139). The groundwork integrates the Linux kernel QUIC driver lxin/quic into Samba's networking logic. This allows Samba to act as a secure “SMB VPN”, ideal for remote work, mobile access, and high-security scenarios.
Milestone 5.2: Enable QUIC testing via socket_wrapper
Testing QUIC implementations without relying on real network interfaces is crucial for fast, automated validation. The team extended socket_wrapper, a tool that emulates network sockets over Unix domain sockets, to simulate QUIC communication using the ngtcp2 userspace library. This approach allows developers to test SMB over QUIC under controlled conditions without kernel dependencies.
With these two milestones, Samba takes a significant step toward full SMB over QUIC support, offering a modern, secure transport layer for the next generation of file services.
Learn more about the full project and its milestones: https://samba.plus/stf-project