ECH returns the ECH config, if any, for the given hostname. The query is resolved using IPMapper's default resolver.

Enabled checks if the tunnel is up and running.

Removes values like v ("*v*") for cidr.

GetAddr implements x.Proxy.

GetAny creates an IPSet for this hostname, which may be empty. Subsequent calls to GetAny return the same IPSet. Never returns nil. hostOrIP may be ho

GetInternal returns the internal transport interface for the given ID.

Returns true if any key in the trie has the prefix.

whether the given msg (ans/query) has a https question section

whether the given msg (ans/query) has a svcb question section

ID implements x.Proxy.

IP returns the IP statistics.

p must be one of settings.IP4, settings.IP6, or settings.IP46

whether the qtype code is a aaaa qtype

whether the qtype code is a A qtype

whether the qtype code is a https qtype

whether the qtype code is a svcb qtype

Len implements Header.

MaxHeaderLength returns the maximum size of the link-layer header.

NewIPMapFor returns a fresh IPMap with r as its nameserver.

NewSieve returns a new Sieve with keys expiring after lifetime.

NewTransportFromHostname returns a DNS53 transport serving from hostname, ready for use.

with http, for 5xx errors

OnSvcComplete reports summary after a connection closes.

ProxyRef returns currently reachable reference to Proxy, if any.

Relaying returns true if this transport always uses a relay (proxy).

Sets k to v in the trie, overwriting any previous value.

not always optimal: go.dev/blog/unique (a footnote about interning strings)

Url returns the url without auth.

Returns csv of values of all routes matching cidr or "".

Who returns identifier for this account; may be empty.

adaptRDial adapts a connectFn[protect.RDial] to a dialFn

String implements fmt.Stringer

canDeliverInline returns true if the supervisor is configured to deliver packets inline. That is, when only one processor is active, deliver packets i

close closes the conn.

use unique.Handle to handle conn2str

Copy one buffer from src to dst, using dst.Write.

each iterates over each primary ip

convert int flags (blocklist-ids) to a packed uint16 stamp

ip4Checksum computes an IPv4 checksum, as specified in https://tools.ietf.org/html/rfc1071

src/dst addrs are flipped fdbased.Attach -> ... -> nic.DeliverNetworkPacket -> ... -> nic.DeliverTransportPacket: github.com/google/gvisor/blob/be6ffa

obtain returns a pointer to a pooled []byte with cap >= size.

onNotOK is called by clients when the proxy is not responsive.

overrideDid assigns did to ent.Did. If ent.Did is already set and does not match the incoming did, errWsDidMismatch is returned and ent is left unchan

recv forwards bytes to msgCh read from conn until error or shutdown. Must be called from a goroutine.

register adds a new dns resolver to the dns64 map; thread-safe.