Estimated wire size of the packet (used for queue size accounting).

Write `frame` and flush, with WRITE_TIMEOUT on each step. Returns `false` if the write or flush failed (caller should break).

Whether standard Yggdrasil address routing is enabled.

Mark a flow active by appending its key to the round-robin ring.

Name of the Salsa20 keystream backend this build selects at runtime on the current CPU: `"AVX2"`, `"SSE2"`, `"NEON"`, or `"scalar"` (with a `(forced)`

Add bloom info for a new peer.

Add a peer connection. Returns actions to execute.

Allocate a new peer. Returns the PeerHandle info (id, port, order) without spawning tasks — the caller is responsible for that.

Get the set of allowed public keys (parsed from hex).

Buffer data and send init for a new session (cold path).

Cache a traffic packet in a rumor (for sending when path is found).

Cache a traffic packet for a destination (sent when path is found or refreshed).

Verify signatures on the announcement.

Check if the version is compatible. Compatible if: same major version AND minor version >= our minor version. This allows forward compatibility (we ac

Clean up old entries (call periodically).

Clean up expired paths and rumors.

Clean up expired callbacks.

Close the core and all links.

Stop multicast peer discovery (if running).

Check equality ignoring the signature.

Remove a flow from the round-robin ring, fixing up the cursor.

Phase 2 of split recv: decrypt outside lock using snapshot.

Attempt to deliver a packet. Returns Some(packet) if a reader is waiting (in which case the caller should send it via channel), or None if the packet

Build interface map from externally provided interface info (e.g. Android ConnectivityManager). Applies the same glob pattern matching as `discover_in

Enumerate system interfaces and match against configured patterns. Returns map of display_name -> InterfaceState.

Run periodic maintenance: update on-tree status and compute new blooms. Returns list of (peer_key, bloom_filter) pairs that need to be sent.

Drain queued traffic packets and send them with timeout. This is called by peer_writer after successfully writing a frame. Drains at most MAX_DRAIN_PE

Drop the oldest packet from the largest flow (for back-pressure). Returns true if a packet was dropped.

Encode a RouterAction into a frame and send it to the appropriate peer.

Parent selection: choose the best root and parent.

Update on-tree status for all peers based on current tree state. `self_key`: our own public key `self_parent`: our current parent's key `infos`: map o

Force a path lookup for the given destination, bypassing the rumor throttle. Returns the number of peers the lookup was multicast to.

Force a path lookup for the given destination, bypassing the rumor throttle. Returns the number of peers the lookup was sent to.

Get snapshot of all active sessions for stats.

Compute the bloom filter we should send to a given peer. Returns (filter, is_new).

Get the list of all configured (outbound) peer URIs with their last errors.

Get a diagnostic snapshot of internal routing state.

Get the list of active multicast interfaces (for admin API).

Get multicast interface info for admin API.

Determine which peers should receive a multicast packet. Returns list of peer keys whose bloom filter matches the destination.

Get the cached path for a destination.

Get all cached paths.

Get peer keys for protocol responses (returns routing peer keys).

Get routing peer keys (direct neighbors in spanning tree).

Get tree keys for protocol responses.

Get TUN adapter status.

Handle incoming ack message (cold path). If a session already exists, treat as a normal ack (just update keys). If no session exists, treat the ack a

Handle an announcement from a peer.

Handle receiving a bloom filter from a peer.

Handle a path broken notification for a destination.

Handle a new peer connection (delegate to ironwood).

Handle debug protocol message.

Handle GetPeers response.

Handle GetSelf response.

Handle GetTree response.

Handle incoming init message (cold path).

Handle incoming lookup from a peer.

Handle NodeInfo request.

Handle NodeInfo response.

Handle incoming path notify from a peer.

Handle incoming protocol message from remote node.

Handle an incoming signature request with explicit req data.

Handle a signature response from a peer.

Handle incoming traffic from a peer.

Handle incoming traffic (hot path). Uses 3-phase pattern: snapshot under lock → decrypt outside lock → finalize under lock.

Check if there is an active connection to the given public key.

Compute ICMPv6 checksum with IPv6 pseudo-header.

Initialize the links with a reference to this core.

Get the display name for an interface entry. On Windows, getifaddrs returns internal names like "ethernet_32778" in `name`, but the human-readable nam

Check if an IP is currently banned.

Check if this is an exact version match (for logging/debugging).

Check if the session has timed out.

Check if a public key is allowed to connect.

Check if a peer is on the spanning tree.

Find the active flow with the most queued bytes (oldest head breaks ties).

Start listening on the given address.

Record that we sent a lookup at this time.

Record that a rumor lookup was sent now (resets expiry timer, like Go's timer.Reset).