Log implements Console.

LogMemFD hands off the shared-memory and that back the double-buffered log data. fd1 and fd2 can be mapped; but must be dup(2)'d before use. size is t

LogPacket logs a packet to stdout.

Implements IPMapper.

Implements IPMapper.

-------------------------------------------------------------------- dns dialer --------------------------------------------------------------------

LookupFor resolves q over client-code preferred tid conveyed via DNSOpts returned from DNSListener.OnQuery. As a special case, UID may be protect.MyUi

LookupFor performs resolution for uid.

Lookup performs resolution on chosen Transport for uid.

Creates a listener that can bind to any active interface, with additional control fns.

Creates a listener that can bind to any active interface.

Did can be left empty if entitlementOrStateJson has one.

MaybeToQuadA translates an A record to a AAAA record if the prefix is not nil. The ttl of the new record is the max of the original ttl and minttl. If

MemProfile triggers GC and writes a heap profile to outprofile. rate controls the memory profiling granularity: 1 is most detailed, 0 disables profili

Mtu returns the current MTU of the tunnel (tun MTU).

NewAutoProxy returns a new exit proxy.

NewBarrier returns a new Barrier with the given time-to-live for completed Vs.

Base returns a base proxy.

NewBigPrivateKey creates a BigPrivateKey from a rsa.PrivateKey.

NewBuiltinDefaultDNS creates a new DefaultDNS resolver of type dnsx.DNS53. It may either use OS provided or network provided DNS resolver, & will not

with http, for 4xx errors

NewConnPool creates a new conn pool with preset capacity and ttl.

NewDNSGateway returns a DNS ALG, ready for use.

NewDNSOptions returns a new DNSOpitons object.

TODO: get d, ep, f, rb through an Opts bag?

NewErrorerTransport returns a DNS transport that always errors out on queries.

NewExit64Proxy returns a new exit64 proxy.

NewExitProxy returns a new exit proxy.

NewFilebased sets a pipe-backed console and returns reader and writer. Caller is expected to hand off the read fd and read until EOF. Caller owns the

NewGroundProxy returns a new ground proxy.

NewGroundedTransport returns a DNS transport that blocks all DNS queries.

NewLogger creates a new Logger with the given tag.

NewMDNSTransport returns a DNS transport that sends all DNS queries to mDNS endpoint.

also: github.com/google/gvisor/blob/adbdac747/runsc/boot/loader.go#L1132 github.com/FlowerWrong/tun2socks/blob/1045a49618/cmd/netstack/main.go github.

NewTransport returns a POST-only Oblivious DoH transport. `id` identifies this transport. `endpoint` is the ODoH proxy that liaisons with the target.

NewP90Estimator returns a new estimator with percentile p.

NewPipWsProxy creates a new pipws proxy with the given id, controller, and proxy options. The proxy options must contain a valid URL, and the URL must

NewSieve2K returns a new Sieve2K with keys expiring after lifetime.

NewTCPHandler returns a TCP forwarder with Intra-style behavior. Connections to `fakedns` are redirected to DOH. All other traffic is forwarded using

NewTransportFrom returns a DNS53 transport serving from ipp, ready for use.

NewUDPHandler makes a UDP handler with Intra-style DNS redirection: All packets are routed directly to their destination. `timeout` controls the effec

refs to pointers to interfaces: go.dev/play/p/QWjdHVrg_84 unsafe type conversion: github.com/golang/go/issues/71583

OnDNSRemoved is called when a DNS transport with id is removed, except when the transport is stopped, then OnDNSStopped is called instead.

OnDNSStopped is called when all DNS transports are stopped. Note: OnDNSRemoved is not called for each transport even if they are being removed and not

OnProxyRemoved is called when a proxy is removed except when all proxies are stopped, in which case OnProxiesStopped is called.

OnProxyStopped is called when a proxy is stopped instead of being removed (that is, this callback is not called in all proxy stop scenarios). A stoppe

OnQuery is called when a DNS query is received. The listener can return a DNSOpts to specify how the query should be handled.

OnUpstreamAnswer is called before an upstream DNS answer (not blocked by firestack) is sent to the OS. The listener may return DNSOpts to specify if a

Opaque returns the client id part of the PipMsg as hex string.

github.com/google/gvisor/blob/738e1d995f/pkg/tcpip/network/ipv4/icmp.go github.com/google/gvisor/blob/738e1d995f/pkg/tcpip/network/ipv6/icmp.go

ParseProcNet scans /proc/net/* returns a list of entries, one entry per line scanned

Payload returns the payload of the IP subprotocol section. This is a read-only view; that is, q retains the ownership of the buffer.

PCAP logging modes: - stdout: packets are logged to stdout - file: packets are logged to a file - none: no packets are logged

Perma reports whether permanent WG credentials should be used in Conf().

Ping implements Proxy As backpressure, pings are sent once in a 5s period.

PreferredAddrs returns the list of IPs per the dialer's preference.

Preflow is called before a new connection is established; return owner "uid", which is later used by dnsx.Resolver to determine the DNS transport to u