Arjen abb0701048 feat(node): app-owned TUN seam — embedder owns the fd, FIPS uses channels ...

Node::enable_app_owned_tun() lets an embedder that owns the TUN fd (e.g. an
Android VpnService) exchange IPv6 packet bytes with FIPS over channels instead of
FIPS creating a system TUN device. It returns (app_outbound_tx, app_inbound_rx):
the embedder pushes packets read from its fd into the outbound sender (app ->
mesh) and pulls packets destined for its fd from the inbound receiver (mesh ->
app). Called after Node::new and before start(), mirroring control_read_handle().

start() now gates TunDevice::create on tun_tx being unset, so when the app-owned
channels are pre-installed it skips system-TUN creation and does no system-TUN
ops. The inbound IPv6-shim delivery already writes to tun_tx, and run_rx_loop
already drains tun_outbound_rx into handle_tun_outbound, so both directions reuse
the existing wiring.

Packets entering via app_outbound_tx bypass the system-TUN reader's
handle_tun_packet, so the embedder must push only fd::/8-destined packets (FIPS no
longer filters the destination) and clamp TCP MSS on outbound SYNs; the rustdoc
and the IPv6-adapter design doc spell this out.

Tests: app_owned_tun_seam_wires_channels covers the channel round-trip and the
Active state; start_skips_system_tun_when_app_owned runs start() and asserts no
named system device is created (tun_name stays unset).

2026-07-14 13:53:57 +02:00

..

handlers

node: classify transit forwards by route class; regroup fipstop routing tab

2026-06-20 14:56:54 +00:00

tests

feat(node): app-owned TUN seam — embedder owns the fd, FIPS uses channels

2026-07-14 13:53:57 +02:00

acl.rs

node: migrate peer ACL to the Reloadable trait and hot-reload the host map

2026-05-29 02:36:00 +00:00

bloom.rs

node: extract immutable state into a shared context and atomic metric registry

2026-06-02 13:05:03 +00:00

context.rs

node: make the shared context the sole store of immutable state

2026-06-02 16:42:05 +00:00

decrypt_worker.rs

data-plane perf overhaul: off-task encrypt + decrypt, GSO, connected UDP

2026-05-19 20:53:31 +00:00

discovery_rate_limit.rs

Tune overly aggressive discovery rate limiting

2026-04-26 19:12:19 +00:00

encrypt_worker.rs

data-plane perf overhaul: off-task encrypt + decrypt, GSO, connected UDP

2026-05-19 20:53:31 +00:00

lifecycle.rs

feat(node): app-owned TUN seam — embedder owns the fd, FIPS uses channels

2026-07-14 13:53:57 +02:00

metrics.rs

node: classify transit forwards by route class; regroup fipstop routing tab

2026-06-20 14:56:54 +00:00

mod.rs

feat(node): app-owned TUN seam — embedder owns the fd, FIPS uses channels

2026-07-14 13:53:57 +02:00

rate_limit.rs

Apply rustfmt to master-only code

2026-04-10 08:47:02 +00:00

reject.rs

discovery: count dropped requests when the dedup cache is full

2026-05-30 01:50:57 +00:00

reloadable.rs

node: migrate peer ACL to the Reloadable trait and hot-reload the host map

2026-05-29 02:36:00 +00:00

retry.rs

node: make the shared context the sole store of immutable state

2026-06-02 16:42:05 +00:00

routing_error_rate_limit.rs

Add rustfmt formatting policy and reformat codebase

2026-04-10 08:27:07 +00:00

session_wire.rs

Add rustfmt formatting policy and reformat codebase

2026-04-10 08:27:07 +00:00

session.rs

Make FSP session rekey hitless under packet loss and reordering

2026-05-23 01:54:04 +00:00

stats_history.rs

control: serve high-traffic show_* queries off the rx_loop hot path

2026-06-10 02:31:54 +00:00

stats.rs

node: classify transit forwards by route class; regroup fipstop routing tab

2026-06-20 14:56:54 +00:00

tree.rs

fix(tree): invalidate coord cache on parent-lost via peer removal

2026-07-02 22:03:36 +00:00

wire.rs

Add rustfmt formatting policy and reformat codebase

2026-04-10 08:27:07 +00:00