ovpn

type Adapter struct {
	// contains filtered or unexported fields
}

type AdapterConfig struct {
	// TLSConfig is the TLS configuration for the OpenVPN server.
	// Must include at least one certificate.
	TLSConfig *tls.Config

	// ListenAddr is the address to listen on (e.g. ":1194").
	// Both TCP and UDP listeners are started on this address.
	ListenAddr string

	// Connector wires each peer's L3Device to the network. Use a
	// [slirp.Stack] or [nat.NAT] for per-peer namespace-isolated NAT.
	// Exactly one of Connector or L2Connector must be set.
	Connector pktkit.L3Connector

	// L2Connector wires each peer as an L2Device on a shared network.
	// Use an [*pktkit.L2Hub] for a shared broadcast domain.
	// Exactly one of Connector or L2Connector must be set.
	L2Connector pktkit.L2Connector

	// Addr is the IP prefix for L2Connector mode (used by the L2Adapter
	// for ARP). Ignored in L3Connector mode.
	Addr netip.Prefix

	// OnAuth is called when a peer authenticates. It receives the
	// credentials and must return the IP configuration to push to the
	// client, or an error to reject the connection.
	OnAuth func(AuthInfo) (PeerConfig, error)
}

type Addr [19]byte

type AuthInfo struct {
	Username   string
	Password   string
	RemoteAddr net.Addr
	PeerInfo   map[string]string
	DevType    string // "tun" or "tap"
}

type CipherBlockMethod uint8

type CipherCryptoAlg uint8

type ControlPacket struct {
	RemoteId [8]byte
	// contains filtered or unexported fields
}

type OVpn struct {
	// contains filtered or unexported fields
}

type Options struct {
	Version         int // 4
	IsServer        bool
	DevType         string // "tun" or "tap"
	LinkMtu, TunMtu uint64
	Proto           string            // "UDPv4", etc
	Compression     string            // "" "lzo" "lz4"
	CipherCrypto    CipherCryptoAlg   // AES
	CipherSize      int               // 128|256
	CipherBlock     CipherBlockMethod // CBC|GCM
	Auth            crypto.Hash       // hmac algo, for example "SHA256"
	KeySize         uint64            // 128
	KeyMethod       uint64            // 2

	// generated local values for faster processing
	AuthHashSize int
	AuthHashNew  func() hash.Hash

	CipherBlockDecrypt cipher.Block
	CipherBlockEncrypt cipher.Block

	DecryptAEAD cipher.AEAD
	EncryptAEAD cipher.AEAD
}

type PacketType byte

type Peer struct {
	IdleTimer uint32
	// contains filtered or unexported fields
}

type PeerConfig struct {
	// IP is the tunnel address to assign to the client.
	IP netip.Addr
	// Mask is the subnet mask (formatted as IP for OpenVPN's ifconfig).
	Mask net.IP
	// Gateway is the gateway address (used in tun/net30 topology).
	Gateway netip.Addr
	// PrefixLen is the prefix length for the L3Device's address.
	PrefixLen int
}

type PeerConn struct {
	// contains filtered or unexported fields
}

type PeerConnection interface {
	SetPeer(p *Peer)
	Close()
	Send(pkt []byte) error
}

type PeerKeys struct {
	CipherEncrypt []byte
	HmacEncrypt   []byte
	CipherDecrypt []byte
	HmacDecrypt   []byte
}

type ServerTcp struct {
	// contains filtered or unexported fields
}

type ServerUdp struct {
	// contains filtered or unexported fields
}