Watch a Hybrid Post-Quantum Handshake on the Wire – IPsec Series, Part 4

We build a real hybrid IKEv2 tunnel in two Docker containers, capture the packets, and run classical versus hybrid side by side, seeing the extra round trip, ML-KEM fragmentation, and that going quantum-safe costs almost nothing.