RUN LOGIC OVER ANY NETWORK DATA

When evaluating serverless platforms such as Cloudflare Workers, Fastly Compute@Edge, or AWS Lambda@Edge, systems architects are forced into a difficult compromise: absolute vendor lock-in, recurring operational costs that scale linearly with traffic, and cold starts that inject unpredictability into critical application pipelines.

Sonic is an open-source, highly modular alternative designed from the ground up to restore complete control over your application edge. By fusing the extreme network acceleration of Linux eBPF Sockmap with a dedicated Goja JavaScript Virtual Machine runtime, Sonic operates directly at the transport layer, letting you execute custom routing, filtering, headers injection, and full API logic under microsecond tolerances.

Traditional edge proxy servers read data from kernel sockets, copy it across the boundaries into userspace, parse the protocols, run the sandboxed engines, and then copy the resulting payloads back through the networking queue. This creates huge CPU overhead. Sonic completely bypasses this slow dance by leveraging eBPF Sockmap.

1. Low-Level Mechanics: The eBPF Sockmap Splicing Bypass

This high-performance bypass keeps hardware utilization remarkably low, making a simple $5 virtual server capable of sustaining high-throughput API gateway tasks that would cost hundreds under commercial cloud providers.

2. Crushing API Pricing Models and Vendor Lock-in

Proprietary SaaS models monetize every millisecond of CPU time and every single request. Many platforms restrict scripts to tiny 50ms execution limits on free tiers and apply substantial markups as your traffic grows. If your backend needs to perform heavy cryptographical computations or parse large JSON payloads, you are hit with massive cost multipliers.

With Sonic, there are no artificial request limits, payload restrictions, or execution limits. You host the binary on your own cloud hardware, physical bare-metal systems, or private data centers. You write standard ES6 JavaScript using standard web paradigms (Request, Response, Headers) and achieve identical outcomes without sending a single byte of telemetry or sensitive request data to commercial third parties.

3. Transparent TLS MITM (Man-in-the-Middle) & Zero-DNS Routing

One of Sonic’s most innovative designs is its built-in transparent TLS interception engine. Rather than requiring users to update their domain registrar DNS records and route entire traffic profiles through remote servers, Sonic acts as an in-line cryptographic proxy:

By generating ephemeral certificates on-the-fly and managing them inside a high-speed concurrent cache, the engine intercepts HTTPS connections securely at the packet level. This allows DevOps to write advanced edge logic directly inside the server holding the origin:

• [v]
  Zero-Configuration DNS: Route specific traffic to edge scripts using standard Linux iptables or routing rules, leaving your public DNS setup completely untouched.
• [v]
  Inline API Gateways & Edge WAF: Block malicious payloads, sanitize headers, filter SQL injection patterns, or handle route mapping before the raw packet ever hits the primary backend port.
• [v]
  Smart Cryptographic Caching: Direct integration with eBPF ensures that repeated SSL/TLS handshakes are handled at maximum speed, preventing proxy degradation.