toPool takes ownership of c.

toPool takes ownership of c.

trackLocked is the non-locking version of track, called when lock is already held

updateV4PacketChecksums updates the checksums in the packet buffer. Currently (2023-03-01) only TCP/UDP/ICMP over IPv4 is supported. p is modified in

updateV6PacketChecksums updates the checksums in the packet buffer. p is modified in place. If p.IPProto is unknown, no checksums are updated.

vaccumLocked removes stale entries from past, limiting to maxVaccumIterCount.

vaccumLocked removes stale entries from past, limiting to maxVaccumIterCount.

xAddr translates ip6 to IPv4 discarding prefix64. If prefix64 or ip6 is not valid, it returns zerovalueaddr. If ip6 is unspecified, it returns unspeci

Abort aborts the connection by sending a RST segment.

AcceptTCP creates a listener on localaddr. network must be "tcp" or "tcp4" or "tcp6".

ActiveWorkers returns a snapshot of all goroutines currently running inside async.go helpers (Go, Gx, Gg, Grx, etc.).

Add appends to the existing list of IPs, hostnames, and hostname's IPs if resolved.

Add64 registers DNS64 resolver f to id.

AddGateways adds relay servers

AddRelayTransport creates and adds a relay server to p

AnnounceUDP announces the local address. network must be "udp" or "udp4" or "udp6". Helper method for d.Announce("udp", local)

AsPipMsg typecast m to PipMsg. m must be a 64 bytes hex string (32b for msg + 32b for opaque-id). Returns nil if the string m is nil or not a valid Pi

Attach launches the goroutine that reads packets from the file descriptor and dispatches them via the provided dispatcher.

backend.Auto is effecively not active.

AutoActive returns true if any of the RPN proxies are in-use by ipn.Auto.

BatchSize implements tun.Device.

Bind4 binds fd to any IPv4 interface that will route addrport.

Bind6 binds fd to any IPv6 interface that will route addrport. also: github.com/lwip-tcpip/lwip/blob/239918c/src/core/ipv6/ip6.c#L68

Blind generates id:blindMsg:blindingFactor:salt:msg id is a 64 byte hmac tying blindMsg to the public key blindMsg is a 256 byte blinded message blind

Bust cache as needed and if ans is not authenticated.

CPUProfile starts a program-wide CPU profiler for durationSecs seconds (clamped to [10, 120]). The CPU profile is written to outproffile, and the flig

CachedAddrs returns addresses for hostOrIP from cache. Use Resolve() to bypass cache.

ChallengeResponse returns the content of the "Proxy-Authenticate" response header, that has been chose as response to "Proxy-Authorization" request he

ChangesConfig reports whether this RpnOps would cause a change in wg config if applied to override "other".

Clears the trie.

Clear deletes all keys and returns the number of keys deleted.

Clear removes all IPSets from the map.

CloseConns implements netstack.GBaseConnHandler

Close connections by pid, cid, uid.

CloseRead closes r.conn for reads, and the read flag.

CloseUDP closes c.

CloseWrite closes r.conn for writes, the write flag.

Confirm3 marks addr as preferred for hostOrIP

Connect creates firestack-administered tunnel. `fd` is the TUN device. The tunnel acquires an additional reference to it, which is released by Disconn

Connect connects the proxy server; thread-safe.

Connect2 is like Connect, but assumes defaults for linkmtu, ifaddrs, and fakedns as -1, ["10.111.222.1/24", "fd66:f83a:c650::0/120"], and ["10.111.222

ConvertHashFunction converts a crypto.Hash function to an equivalent hash.Hash type.

Created implements x.RpnAcc.

D64 synthesizes ans64 (AAAA) from ans6 if required, using resolver f. Returned ans64 is nil if no DNS64 synthesis is needed (not AAAA). Returned ans64

DecryptAndCheck checks that the private key operation is consistent (fault attack detection).

DefaultTunMode returns a new default TunMode with IP-only DNS capture and replay (not all DNS traffic but only the DNS traffic sent to [tcp/udp]handle

Dial implements Proxy.