Return the proxy (relay) always used by this transport. Returns nil if there isn't any.

Gg runs f in a goroutine, recovers from any panics if any; then calls cb in a separate goroutine, and recovers from any panics.

HasAuth returns true if p has auth params.

Exported for testing only.

IsDnsAddr returns true if the ip:port is resolver's fake endpoint

whether question q is a https question

Returns true if ip is a NAT64 address from transport id.

whether question q is a svcb question

K sets the (value, expiry) for the given key and returns the number of hits. expiry must be greater than the minimum lifetime.

LOB returns a truncated byte slice of size 524288

LinkAddress returns the link address of this endpoint.

Load returns the value of a. May return zero value. This func is atomic.

LookupNetIPFor is like LookupFor

MDNS returns the mdns transport, if available; error otherwise.

MakeIPSet creates an IPSet for this hostname bootstrapped with given IPs or IP:Ports. Subsequent calls to MakeIPSet return a new, overridden IPSet. ho

unused: Creates a listener that binds to a particular ip.

MakeUapiConfig builds an on-the-fly UAPI config string that overlays the credentials from a permanent config (private key, address, DNS, preshared key

Msg implements PipKeyProvider.

Mult returns the key multiplied by the basepoint (curve25519).

NewBigPublicKey creates a BigPublicKey from a rsa.PublicKey.

NewDcMult creates a dnscrypt proxy

fd must be non-blocking.

in secs NewGoosTransport returns the default Go DNS resolver

NewMemoryBased creates a Memconsole backed by page-aligned memfd regions. Returns an error if the kernel does not support memfd_create (Linux < 3.17)

NewNatPt2 returns a new NatPt.

NewProcNetEntry creates an Entry

hostOrIP may be host:port, or ip:port, or host, or ip.

ref: github.com/WireGuard/wireguard-android/blob/713947e432/tunnel/tools/libwg-go/api-android.go#L76

NewXdomains returns a new xdomains object keyed by tid+uid.

NewXips returns a new xips object with primary and secondary ips. May return nil if tid is empty.

OnDNSAdded is called when a new DNS transport with id is added.

OnResponse is called when a DNS response is received. May be called twice for the same query, for instance, when different options are requested throu

Ops returns the RpnOps that control the behaviour of Update.

P logs a private message.

given an alg or real ip, retrieves assoc dns names as csv, if any

from: github.com/go-ping/ping/blob/caaf2b72ea5/ping.go

Postflow reports summary after flow closes.

prefers v4; see: github.com/WireGuard/wireguard-android/blob/4ba87947a/tunnel/src/main/java/com/wireguard/config/InetEndpoint.java#L97

Protect marks fd as protected from routing loops, if any. On Android, this means calling VpnService.protect(fd) to exempt it from fwmarks that route i

QueryFor forward a DNS request for uid (if set) or to chosen transport, tid (if uid is not set).

TODO: merge this with doh.Accept

ReverseProxy copies data between conn and dst (ingress).

Reverser sets the reverse proxy for all proxies.

SetKeepAliveConfigSockOpt sets for a TCP connection, SO_KEEPALIVE, TCP_KEEPIDLE, TCP_KEEPINTVL, TCP_KEEPCNT, TCP_USER_TIMEOUT. args is optional, and s

SetReader installs r as the consumer of the Memconsole's shared-memory buffers. Drain(fd, start, end) is called synchronously (but without mc.mu held

State returns the state (as json) of the account.