ranet3 by stepbrobd.com · Tangled

forked from ranet3/ranet3

Commits on master

pkgs/raweb3: say that a session follows the answers to its own requests and what the move event names

committed 2w ago

ike: draw requests, answers and replays from moving peers against the endpoint they leave

committed 2w ago

ike,transport: follow an authenticated answer to this end's own request

committed 2w ago

internal/netstack: say that a peer's data budget is full when its socket is backpressured or when its sender has not yet run to drain it

committed 2w ago

internal/egress/kernel: read the socket a test holds through its descriptor rather than from the netlink listing

committed 2w ago

internal/netstack: count the packets the delay control sheds with those sent, in the test of a queue holding everything the budgets admit

committed 2w ago

internal/netstack: hand the peer that is not congested each read once it has sent the one before, in the test of a congested peer

committed 2w ago

internal/netstack: test that the exit takes a batch only after the mesh has counted it, for both egress hand-offs

committed 2w ago

pkgs/raweb3: name the android build in the go-lint row

committed 2w ago

checks/go/lint: build the daemon for android

committed 2w ago

internal/client,pkgs/raweb3: say ranet3 reads the connection table limit and link what the kernel evicts

committed 2w ago

pkgs/raweb3: drop the comment above the font stack

committed 2w ago

pkgs/raweb3: say what the docker, tailscale and k3s checks run beside ranet3 and what each asserts of both

committed 2w ago

checks/integration/k3s: run k3s with kube-proxy and flannel beside ranet3, its pods from an image in the store

committed 2w ago

checks/integration/tailscale: run tailscale with headscale beside ranet3, and an exit node

committed 2w ago

checks/integration/docker: run docker beside an exit node

committed 2w ago

checks/integration/harness: add a flag that runs another program beside ranet3 with the derived rules and the overlay held, and a reading of what ranet3 holds beside it

committed 2w ago

internal/registry: say what a community registry's endpoints hold without its counts

committed 2w ago

internal/babel,schema: take the tests' names and addresses from the placeholders the pages use and state the round trip rule and the route bound without a fleet's measurement

committed 2w ago

srv6: take the tests' segment addresses from the documentation ranges and write the answers' golden file from them

committed 2w ago

internal/netstack: take the tests' segment addresses from the documentation ranges

committed 2w ago

internal/kernel,internal/egress/kernel: take the tests' prefixes and inside device from the documentation ranges and the placeholders the pages use

committed 2w ago

internal/client: take the tests' prefixes and names from the documentation ranges and the placeholders the pages use, and give the tests' reasons without a fleet's measurement

committed 2w ago

internal/config: take the tests' prefixes and names from the documentation ranges and the placeholders the pages use

committed 2w ago

cmd/ranet3,control: take the tests' addresses and names from the documentation ranges and the placeholders the pages use

committed 2w ago

identity: take the tests' names from the placeholders the pages use

committed 2w ago

pkgs/raweb3,examples: say what an exit's readiness reads back, which flows its timeouts and share cover, what its status line prints and when the reconciler asks its lookups

committed 2w ago

internal/egress/kernel: say that an exit's readiness reads back its chains, set and timeout objects rather than its whole table

committed 2w ago

control,internal/client: name every condition an exit's prefix is announced under, the addresses its classes translate to among them

committed 2w ago

pkgs/raweb3: say what the reconciler asks each pass to find another program's rule ahead of its own, and where it reports one that takes a lookup

committed 2w ago

internal/client,control,cmd/ranet3: hand the reconciler the live sessions' endpoints, and report what another program's rule takes on the kernel line, in two gauges and in the rules view

committed 2w ago

internal/kernel,checks/netlink: ask each pass where an overlay hold's address and each live peer endpoint under the underlay's mark end, and report another program's rule that takes them once per change

committed 2w ago

internal/kernel: send a batch read's mark with its lookup, and answer a batch on a socket the caller holds

committed 2w ago

pkgs/raweb3: say that ike's tests run on a network in memory on a fake clock, what stays on real sockets and real time, and what go-lint checks of the daemon

committed 2w ago

checks/go/lint: fail where the daemon links the network in memory or a file outside it and the tests calls its constructor

committed 2w ago

ike: run the rest of the tests that open a hub or socket in bubbles, leaving on the real clock those whose session waits for a mutex

committed 2w ago

ike: open every hub and socket of the tests on a network in memory, and run the repeat properties and the thirty slowest tests in bubbles

committed 2w ago

transport: run a hub over any bind, and add a network in memory that carries udp as loopback does

committed 2w ago

pkgs/raweb3: describe cap.egress translate's classes, the timeouts an exit keeps the flows it translates to and each mesh source's share of its flows, and list the NAT and RFC 6888 requirements the kernel exit departs from

committed 2w ago

internal/egress/egresstest,internal/egress/kernel,checks/netlink: add the suite's filtering and hairpinning rows, each a limit the kernel exit declares with its reason and deviations row

committed 2w ago

treewide: hold each mesh source to the share of an exit's flows cap.egress flows_per_source sets, refuse a flow past it, and add the suite's row 6, which the netlink check runs on 2048 MiB so conntrack's table, which the kernel sizes by memory, holds a source's share filled in each family at once

committed 2w ago

internal/egress/kernel,internal/egress/egresstest,checks/netlink: give the flows the exit translates timeouts of its own and read each flow's idle timer in the suite

committed 2w ago

internal/egress/kernel,internal/netnstest,checks/netlink: hold a family not ready while the host does not hold an address its classes translate to

committed 2w ago

treewide: replace source4 and source6 with cap.egress translate's classes, none bound to its own source and the exit's own mesh addresses under their class

committed 2w ago

internal/nftables,internal/egress/kernel: add sets, ct timeout objects and the expressions a per-source flow limit and a timeout policy take, and read a table's chains, sets and objects back by name

committed 2w ago

pkgs/raweb3,examples: say what an exit's tun carries, where a hold and the scoped default apply, what a reload, a withdrawal and a cover record, and cut the kernel's behavior to what ranet3 decides

committed 2w ago

cmd/ranet3: say in debug rules' help that the wanted rules are the ones the reconciler derives

committed 2w ago

transport: say that a fallback holds a session off its pin for unroutedHold only after the kernel refused the pin with EHOSTUNREACH

committed 2w ago

internal/babel: say that quality none leaves this node's own Hello loss out of the rxcost it advertises and the cost it takes from a neighbor

committed 2w ago

internal/client: say that a netdns setting forces go only where it names go, and that the neighbor lab's test writes the routes into l's tun

committed 2w ago

internal/netstack: say that withHeader builds an 8-octet header from a 6-octet body, and drop classify's restatement of its unrouted arm

committed 2w ago

internal/kernel: say what wakes the reconciler on each platform, that a reconcile interval under the retry floor is every delay, and why a hold that counts as a default is declined

committed 2w ago

pkgs/raweb3: document the checks a tun read meets entering the mesh, the drops they count and their limits

committed 2w ago

internal/client: lab a host's forwarded reads at the mesh's edge and a neighbor's reach through a forwarding leaf

committed 2w ago

internal/netstack,control,internal/client: drop a tun read the table answers this node's own, counted as looped

committed 2w ago

internal/netstack,control,internal/client: check the packet an IPv6 tun read carries as a read of its own, one level deep, dropping one that carries another, counted as nested

committed 2w ago

internal/netstack,control,internal/client: drop a tun read toward an entry counting as a default from a source this node does not own, counted as unowned_source

committed 2w ago

internal/netstack,control,internal/client: drop a tun read carrying a routing header the edge refuses, to a SID of this node's, or from a source another node's or unowned inside the overlay, counted by reason

committed 2w ago

srv6: walk a packet entering the mesh past its hop-by-hop, destination options and routing headers, refusing the routing types its edge drops, and name a SID of this node's

committed 2w ago

pkgs/raweb3: say which rules the reconciler derives, what the mirror throws and holds, how the underlay's mark skips them and what an exit withholds

committed 2w ago