The XSalsa core function.

Admin socket for monitoring and controlling the node.

Multicast advertisement matching Go's wire format.

Trait for transport connections used by peers. Any async bidirectional byte stream (TCP, TLS, WebSocket, etc.).

Manages bloom filters for all peers.

Packet buffered while waiting for a key lookup to complete.

Concurrent session manager with per-session locks. Unlike `SessionManager` which requires a single global mutex, this structure uses a `RwLock<HashMa

Configuration for an ironwood PacketConn.

Core wraps an ironwood EncryptedPacketConn with session type handling and TCP link management.

Wrapper that counts bytes read/written from a stream. Uses local buffering to minimize atomic operations.

Cryptographic identity: holds signing key and derived public key.

CKR routing table. Maps IP subnets to Yggdrasil node public keys.

Which decrypt path was selected.

Decrypted incoming message.

DeliveryQueue manages the packet queue with receive-ready counting. Packets are queued when no reader is waiting, and sent directly when a reader is r

Encrypted PacketConn: wraps a network `PacketConnImpl` with encryption.

Track failed connection attempts for throttling/banning.

A single flow's backlog plus its DRR scheduling state. The flow's identity lives in the `PacketQueue::flows` map key and `active` ring, so it isn't du

Intermediate: collects per-interface data from the getifaddrs iterator.

Manages TCP peer connections and listeners.

Info about a TLS listener started for beaconing.

Manages multicast peer discovery.

Info returned by admin API.

Actions produced by the session manager.

The concrete PacketConn implementation.

Deficit round robin packet queue. Packets are grouped into flows keyed by (source, dest). `pop` serves flows round-robin, granting each visited flow

Cached path information for a known destination.

A pending lookup for a destination we don't have a path to yet.

Path discovery and caching state machine. Maintains known paths to destinations and handles the lookup protocol. Must be used from within the router'

Handle to a peer's writer task.

Manages all peer connections.

Info about a single queued packet.

Protocol handler for remote queries.

Bridges IPv6 traffic (TUN) with the ironwood-based Core. When the `ckr` feature is enabled, also handles IPv4 and CKR-routed traffic.

Action needed after receiving a packet.

Recv-side state snapshot, captured under lock, used for decryption outside lock.

Error from recv_snapshot (carries data needed for SendInit without re-locking).

A single CKR route: CIDR prefix -> destination public key.

The spanning tree CRDT router. Maintains tree state, handles announcements, performs greedy routing, and coordinates bloom filters and path discovery

Messages sent to the router actor task.

The Salsa20 core function.