KarpelesLab / pktkit / 24324508934

Builds Branch Commit Type Ran Committer Via Coverage
24324508934 master Add DHCP static leases and qemu.Adapter for per-guest isolation DHCPServerConfig gains a StaticLeases map[[6]byte]netip.Addr for MAC-to-IP reservations; reserved IPs are never handed to other clients even when they fall inside the dynamic pool. ... push MagicalTux github
53.52
24013095013 master Add multi-key Adapter support and parallel packet processing Adapter now accepts a MultiHandler for serving multiple WireGuard identities on a single UDP port with pktkit networking integration. New methods: AddPeerTo, RemovePeerFrom, ConnectWith... push MagicalTux github
53.34
24007449401 master Fix CI: use bash shell on Windows to avoid PowerShell arg parsing PowerShell splits -coverprofile=coverage.out treating .out as a separate package argument. Using shell: bash fixes the issue. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply... push MagicalTux github
53.43
24007150346 master Add Windows and macOS CI, fix cross-platform build - Add macos-latest and windows-latest to test matrix - Move qemu.Socketpair to unix-only file (socketpair_unix.go) - Add build tags to qemu and qemu_e2e tests that use Socketpair - All packages b... push MagicalTux github
53.36
24006830663 master Add AF_XDP driver package for kernel-bypass L2 frame I/O New afxdp/ package implementing pktkit.L2Device over Linux AF_XDP sockets using only golang.org/x/sys/unix — no external libraries. - UMEM shared memory with split RX/TX frame pools - Lock... push MagicalTux github
53.41
24005892453 master Improve test coverage for nat, ovpn, and vclient packages nat: 14.4% → 36.9% — defrag reassembly, NAT64 IPv6↔IPv4 translation, ALG expectations, port forwards, ConnectL3 namespaces. ovpn: 10.8% → 37.6% — GCM/CBC encrypt/decrypt roundtrip, replay... push MagicalTux github
55.77
24004585469 master Rewrite e2e VPN benchmarks to measure pipelined throughput Previous benchmarks measured per-packet latency (send-wait-receive), reporting 50 MB/s which was dominated by UDP loopback syscall overhead. New benchmarks saturate the pipeline: sender ... push MagicalTux github
44.34
24004525574 master Add end-to-end VPN throughput benchmarks over real UDP loopback Both WireGuard and OpenVPN benchmarks use real UDP sockets on 127.0.0.1 for a fair apples-to-apples comparison of the full encrypt → sendto → recvfrom → decrypt pipeline at 1400B pay... push MagicalTux github
44.29
24004240187 master Fix OpenVPN GCM decrypt benchmark and guard nil replay window The decrypt benchmark was inflated by per-iteration make+copy overhead (~50% of measured time). Fixed to reuse a pre-copied buffer with replay window disabled, revealing the true decry... push MagicalTux github
44.33
24004052060 master Update README benchmarks with current performance numbers Add separate benchmark tables for NAT, WireGuard, and OpenVPN GCM reflecting the recent optimization work (zero-alloc NAT at 36 GB/s, WireGuard EncryptTo at 2.6 GB/s, OpenVPN GCM encrypt a... push MagicalTux github
44.33
24003982542 master Optimize OpenVPN GCM data channel: 18x encrypt, 2x decrypt Rewrite GCM encrypt/decrypt hot paths to eliminate per-packet allocations: Encrypt (sendDataGCM): pre-allocate single output buffer from global pool, build nonce/AD on stack, Seal direct... push MagicalTux github
44.34
24003830068 master Add zero-allocation WireGuard encrypt/decrypt path (8x faster) New EncryptTo(dst, data, peerKey) writes into a caller-provided buffer, and EncryptPooled returns a buffer from the global packet pool. Both achieve 0 allocs/op on the encrypt path. ... push MagicalTux github
44.62
24003533694 master Optimize WireGuard transport and add global packet buffer pool WireGuard encrypt 1.8x faster (314 → 556 MB/s), decrypt 1.6x faster (224 → 362 MB/s) at MTU-sized packets: - Seal directly into result buffer at offset 16, eliminating the intermed... push MagicalTux github
44.65
24003398688 master Optimize NAT hot path: 28x throughput improvement (1.3 → 36 GB/s) Three changes eliminate all per-packet allocation and syscall overhead: - sync.Pool for packet buffers: removes the 1536-byte make() per packet that was driving ~29% of CPU into... push MagicalTux github
44.55
24002717821 master Fix medium and low severity security issues across all packages WireGuard: make now() overridable (default time.Now, opt-in cached clock via UseCachedTime), per-keypair atomic send counter starting at 0, add RejectAfterMessages/RekeyAfterTime/Rek... push MagicalTux github
44.58