firezone / firezone / 23596776658

67%

main: 67%

Build Type

push

github

Committed by web-flow

Commit Message

feat(connlib): eagerly flush GSO queue after encrypting (#12649)

In a node that is busy with sending and receiving packets at the same
time, the current architecture of the tunnel's event-loop delays the
flushing of UDP packets to the IO thread until all inbound packets of
the current event-loop tick have been decrypted. Given that encryption
and decryption is the dominant consumer of CPU time of this thread, this
unnecessarily delays the sending of these UDP packets.

To fix this, we insert a dedicated `flush_gso_queue` function call after
the hot-loop that encrypted the current batch of packets from the TUN
device. Flushing these packets to the channel is something that needs to
happen anyway. Doing it earlier allows the UDP IO thread to already send
them out via the socket whilst the main thread is decrypting the next
batch.

Coverage Stats

8 of 17 new or added lines in 2 files covered. (47.06%)

5 existing lines in 1 file now uncovered.

35773 of 53310 relevant lines covered (67.1%)

471875.17 hits per line