firezone / firezone / 41403507657

80%

Build Type

push

github

Committed by web-flow

Commit Message

perf(connlib): skip the STUN parser for non-STUN packets (#16165)

Every datagram we receive is tried as a STUN message before it is
handled as WireGuard. `StunMessage::parse` rejects WireGuard packets at
its length check, but allocates its error string to say so, which costs
every packet on the receive path roughly 200 instructions. Every STUN
message carries the magic cookie in bytes 4 to 8, so checking for it
first lets WireGuard traffic skip the parser without changing which
packets are handled as STUN.

---------

Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

1377 of 2287 branches covered (60.21%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 1 file covered. (100.0%)

105 existing lines in 8 files now uncovered.

94396 of 117429 relevant lines covered (80.39%)

369305.14 hits per line