“In this blog series, we will implement a minimal userspace TCP/IP stack for Linux.”
A TAP device, some C and a copy of the RFCs, and you can answer ARP requests from userspace. Ethernet and IP are simple. TCP’s state machine and retransmission timers are where the thirty years of complexity live. Most developers use the network stack every day and never look inside it, and it shows when something breaks.