daemon

package

Go to main page

Versions in this module

v1

v1.12.5

Jul 13, 2026

Changes in this version

+ const CmdSignEnvelope

+ const CmdSignEnvelopeOK

+ const CmdVerifyEnvelope

+ const CmdVerifyEnvelopeOK

type Config

+ DisableRxWatchdog bool

type TunnelManager

+ LastRecvNano int64

+ func (tm *TunnelManager) LastRecvTime() time.Time

v1.12.4

Jun 29, 2026

v1.12.3

Jun 23, 2026

Changes in this version

type Daemon

+ func (d *Daemon) HealthSnapshot() HealthSnapshot

+ type HealthSnapshot struct

+ AcceptQueueDrops uint64

+ AuthenticatedPeers int

+ BeaconAddr string

+ BytesRecv uint64

+ BytesSent uint64

+ Connections int

+ EncryptedPeers int

+ HandshakePendingCount int

+ Peers int

+ RelayPeerCount int

+ Uptime time.Duration

+ WebhookCircuitSkips uint64

+ WebhookQueueDropped uint64

v1.12.2

Jun 22, 2026

v1.12.1

Jun 21, 2026

v1.12.0

Jun 21, 2026

Changes in this version

+ const AcceptQueueLen

+ const ClockGranularity

+ const CmdAccept

+ const CmdBind

+ const CmdBindOK

+ const CmdBroadcast

+ const CmdBroadcastOK

+ const CmdCancel

+ const CmdClose

+ const CmdCloseOK

+ const CmdDeregister

+ const CmdDeregisterOK

+ const CmdDial

+ const CmdDialOK

+ const CmdEnrollRecovery

+ const CmdEnrollRecoveryOK

+ const CmdError

+ const CmdHandshake

+ const CmdHandshakeOK

+ const CmdHealth

+ const CmdHealthOK

+ const CmdInfo

+ const CmdInfoOK

+ const CmdManaged

+ const CmdManagedOK

+ const CmdNetwork

+ const CmdNetworkOK

+ const CmdPreferDirect

+ const CmdPreferDirectOK

+ const CmdRecv

+ const CmdRecvFrom

+ const CmdResolveHostname

+ const CmdResolveHostnameOK

+ const CmdRotateKey

+ const CmdRotateKeyOK

+ const CmdSend

+ const CmdSendTo

+ const CmdSetHostname

+ const CmdSetHostnameOK

+ const CmdSetTags

+ const CmdSetTagsOK

+ const CmdSetVisibility

+ const CmdSetVisibilityOK

+ const CmdSetWebhook

+ const CmdSetWebhookOK

+ const CmdSubmitBadge

+ const CmdSubmitBadgeOK

+ const DefaultIdleSweepInterval

+ const DefaultIdleTimeout

+ const DefaultKeepaliveInterval

+ const DefaultMaxConnectionsPerPort

+ const DefaultMaxTotalConnections

+ const DefaultNetworkSyncInterval

+ const DefaultSYNRateLimit

+ const DefaultTimeWaitDuration

+ const DelayedACKThreshold

+ const DelayedACKTimeout

+ const DialCheckInterval

+ const DialDirectRetries

+ const DialInitialRTO

+ const DialMaxRTO

+ const DialMaxRetries

+ const EndpointCacheTTL

+ const HeartbeatReregThresh

+ const IPCEnvelopeHeaderSize

+ const InitialCongWin

+ const InitialRTO

+ const MaxCongWin

+ const MaxConnsPerIPCClient

+ const MaxIPCClients

+ const MaxNagleBuf

+ const MaxOOOBuf

+ const MaxRecvWin

+ const MaxRetxAttempts

+ const MaxSegmentSize

+ const MaxZeroWindowProbes

+ const NagleTimeout

+ const PolicyEventConnect

+ const PolicyEventCycle

+ const PolicyEventDatagram

+ const PolicyEventDial

+ const PolicyEventJoin

+ const PolicyEventLeave

+ const RTOMax

+ const RTOMin

+ const RecvBufSize

+ const RecvChSize

+ const RelayProbeInterval

+ const ResolveCacheTTL

+ const RetxCheckInterval

+ const SYNBucketAge

+ const SendBufLen

+ const SubHandshakeApprove

+ const SubHandshakePending

+ const SubHandshakeReject

+ const SubHandshakeRevoke

+ const SubHandshakeSend

+ const SubHandshakeTrusted

+ const SubHandshakeWait

+ const SubManagedCycle

+ const SubManagedMemberTags

+ const SubManagedPolicy

+ const SubManagedReconcile

+ const SubManagedStatus

+ const SubNetworkInvite

+ const SubNetworkJoin

+ const SubNetworkLeave

+ const SubNetworkList

+ const SubNetworkMembers

+ const SubNetworkPollInvites

+ const SubNetworkRespondInvite

+ const SynSentReapDuration

+ const TopicNetworkJoined

+ const TopicNetworkLeft

+ const TopicNetworkTagsChanged

+ const ZeroWinProbeInitial

+ const ZeroWinProbeMax

+ var ErrEphemeralExhausted = errors.New("ephemeral ports exhausted")

+ var ErrHandshakeInFlight = errors.New("handshake already in flight to this peer")

+ var ErrIPCBackpressure = errors.New("ipc: backpressure (client too slow)")

+ var ErrIPCClosed = errors.New("ipc: connection closed")

+ var ErrPendingDropped = errors.New("pending queue full: oldest queued packet dropped while key exchange pending")

+ var ErrSendBufFull = errors.New("send buffer full")

+ var TunnelKeepaliveInterval = 25 * time.Second

+ func DiscoverEndpoint(beaconAddr string, nodeID uint32, conn *net.UDPConn) (*net.UDPAddr, error)

+ func EncodeSACK(blocks []SACKBlock) []byte

+ func RecoveredPanicCount() uint64

+ func ValidateWebhookURL(rawURL string) error

+ type Config struct

+ AdminToken string

+ AdvertiseEndpoint string

+ BeaconAddr string

+ BeaconRTTProbe bool

+ CompatBeaconURL string

+ CompatTLSTrust string

+ DisableDataExchange bool

+ DisableEcho bool

+ DisableEventStream bool

+ DisablePolicyRunner bool

+ Email string

+ Encrypt bool

+ Endpoint string

+ Hostname string

+ IPCWhitelist []string

+ IdentityPath string

+ IdleTimeout time.Duration

+ KeepaliveInterval time.Duration

+ ListenAddr string

+ MOTDFeedURL string

+ MOTDInterval time.Duration

+ MaxConnectionsPerPort int

+ MaxTotalConnections int

+ Networks []uint16

+ Owner string

+ Public bool

+ RegistryAddr string

+ RegistryFingerprint string

+ RegistryTLS bool

+ RegistryTrust string

+ RelayOnly bool

+ SYNRateLimit int

+ SocketPath string

+ TelemetryURL string

+ TimeWaitDuration time.Duration

+ TransportMode string

+ TrustAutoApprove bool

+ Version string

+ WebhookHTTPTimeout time.Duration

+ WebhookRetryBackoff time.Duration

+ WebhookURL string

+ type ConnReadWriter interface

+ Close func() error

+ Read func(p []byte) (int, error)

+ Write func(p []byte) (int, error)

+ type ConnState uint8

+ const StateCloseWait

+ const StateClosed

+ const StateEstablished

+ const StateFinWait

+ const StateListen

+ const StateSynReceived

+ const StateSynSent

+ const StateTimeWait

+ func (s ConnState) String() string

+ type ConnStats struct

+ BytesRecv uint64

+ BytesSent uint64

+ DupACKs uint64

+ FastRetx uint64

+ Retransmits uint64

+ SACKRecv uint64

+ SACKSent uint64

+ SegsRecv uint64

+ SegsSent uint64

+ type ConnectCompatConfig struct

+ BeaconURL string

+ Identity *crypto.Identity

+ NodeID uint32

+ TLSConfig *tls.Config

+ type Connection struct

+ ACKTimer *time.Timer

+ AckMu sync.Mutex

+ CloseOnce sync.Once

+ CongWin int

+ DupAckCount int

+ ExpectedSeq uint32

+ FastRecovery bool

+ ID uint32

+ InRecovery bool

+ KeepaliveUnacked int

+ LastAck uint32

+ LastActivity time.Time

+ LastRetxTime time.Time

+ LocalAddr protocol.Addr

+ LocalPort uint16

+ Mu sync.Mutex

+ NagleBuf []byte

+ NagleCh chan struct{}

+ NagleMu sync.Mutex

+ NoDelay bool

+ OOOBuf []*recvSegment

+ PeerRecvWin int

+ PendingACKs int

+ RTO time.Duration

+ RTTVAR time.Duration

+ RecoveryPoint uint32

+ RecvAck uint32

+ RecvBuf chan []byte

+ RecvClosed bool

+ RecvMu sync.Mutex

+ RemoteAddr protocol.Addr

+ RemotePort uint16

+ RetxMu sync.Mutex

+ RetxSend func(*protocol.Packet)

+ RetxStop chan struct{}

+ SRTT time.Duration

+ SSThresh int

+ SendBuf chan []byte

+ SendSeq uint32

+ State ConnState

+ Stats ConnStats

+ SynAckSeq uint32

+ SynAckSeqSet bool

+ Unacked []*retxEntry

+ WindowCh chan struct{}

+ func (c *Connection) BytesInFlight() int

+ func (c *Connection) CloseRecvBuf()

+ func (c *Connection) DeliverInOrder(seq uint32, data []byte) uint32

+ func (c *Connection) EffectiveWindow() int

+ func (c *Connection) Info() daemonapi.ConnectionInfo

+ func (c *Connection) ProcessAck(ack uint32, pureACK bool)

+ func (c *Connection) ProcessSACK(blocks []SACKBlock)

+ func (c *Connection) RecvWindow() uint16

+ func (c *Connection) SACKBlocks() []SACKBlock

+ func (c *Connection) TrackSend(seq uint32, data []byte)

+ func (c *Connection) WindowAvailable() bool

+ type ConnectionInfo struct

+ CongWin int

+ ID uint32

+ InFlight int

+ InRecovery bool

+ LocalPort uint16

+ OOOBuf int

+ PeerRecvWin int

+ RTTVAR time.Duration

+ RecvAck uint32

+ RecvWin int

+ RemoteAddr string

+ RemotePort uint16

+ SRTT time.Duration

+ SSThresh int

+ SendSeq uint32

+ State string

+ Stats ConnStats

+ Unacked int

+ type Daemon struct

+ AcceptQueueDrops uint64

+ func New(cfg Config) *Daemon

+ func (d *Daemon) AddTunnelPeer(nodeID uint32, addr *net.UDPAddr)

+ func (d *Daemon) Addr() protocol.Addr

+ func (d *Daemon) AdminToken() string

+ func (d *Daemon) BroadcastDatagram(netID uint16, dstPort uint16, data []byte, adminToken string) error

+ func (d *Daemon) Bus() daemonapi.EventBus

+ func (d *Daemon) CachedEndpoint(nodeID uint32) (string, bool)

+ func (d *Daemon) CloseConnection(conn *Connection)

+ func (d *Daemon) DaemonAPI() daemonapi.Daemon

+ func (d *Daemon) DialConnection(dstAddr protocol.Addr, dstPort uint16) (*Connection, error)

+ func (d *Daemon) DialConnectionContext(ctx context.Context, dstAddr protocol.Addr, dstPort uint16) (*Connection, error)

+ func (d *Daemon) GetManagedEngine(netID uint16) *ManagedEngine

+ func (d *Daemon) GetMemberTags(netID uint16) []string

+ func (d *Daemon) GetPolicyRunner(netID uint16) PolicyRunner

+ func (d *Daemon) GetTrustChecker() TrustChecker

+ func (d *Daemon) HandshakeRevokeTrust(nodeID uint32) error

+ func (d *Daemon) HandshakeSendRequest(nodeID uint32, reason string) error

+ func (d *Daemon) HandshakeService() HandshakeService

+ func (d *Daemon) Identity() *crypto.Identity

+ func (d *Daemon) IdentityPath() string

+ func (d *Daemon) Info() *DaemonInfo

+ func (d *Daemon) NewConnReadWriter(conn *Connection) ConnReadWriter

+ func (d *Daemon) NodeID() uint32

+ func (d *Daemon) Ports() *PortManager

+ func (d *Daemon) PublishEvent(topic string, payload map[string]any)

+ func (d *Daemon) RegConnListNodes(netID uint16, token string) (map[string]any, error)

+ func (d *Daemon) RegisterHandshakeService(svc HandshakeService)

+ func (d *Daemon) RegisterPolicyManager(pm PolicyManager)

+ func (d *Daemon) RegisterTrustChecker(tc TrustChecker)

+ func (d *Daemon) RegisterWebhookManager(wm WebhookManager)

+ func (d *Daemon) RegistryClient() *registry.Client

+ func (d *Daemon) RotateKey() (map[string]interface{}, error)

+ func (d *Daemon) SendData(conn *Connection, data []byte) error

+ func (d *Daemon) SendDatagram(dstAddr protocol.Addr, dstPort uint16, data []byte) error

+ func (d *Daemon) SetMemberTags(netID uint16, tags []string)

+ func (d *Daemon) SetRekeyWhitelist(nodeIDs []uint32)

+ func (d *Daemon) SetRekeyWhitelistMatchAll(on bool)

+ func (d *Daemon) SetReplyWhitelist(nodeIDs []uint32)

+ func (d *Daemon) SetReplyWhitelistMatchAll(on bool)

+ func (d *Daemon) SetSYNWhitelist(nodeIDs []uint32)

+ func (d *Daemon) SetSYNWhitelistMatchAll(on bool)

+ func (d *Daemon) SetWebhookURL(url string)

+ func (d *Daemon) Sign(msg []byte) []byte

+ func (d *Daemon) Start() error

+ func (d *Daemon) StartManagedEngine(netID uint16, rules *registrywire.NetworkRules)

+ func (d *Daemon) StartPolicyRunner(netID uint16, policyJSON json.RawMessage) error

+ func (d *Daemon) Stop() error

+ func (d *Daemon) StopManagedEngine(netID uint16)

+ func (d *Daemon) StopPolicyRunner(netID uint16)

+ func (d *Daemon) TrustAutoApprove() bool

+ func (d *Daemon) TrustedPeers() []HandshakeTrustRecord

+ func (d *Daemon) TunnelAddr() net.Addr

+ func (d *Daemon) Tunnels() *TunnelManager

+ type DaemonInfo struct

+ AcceptQueueDrops uint64

+ Address string

+ AuthenticatedPeers int

+ BeaconAddr string

+ BytesRecv uint64

+ BytesSent uint64

+ ConnList []ConnectionInfo

+ Connections int

+ Email string

+ Encrypt bool

+ EncryptFail uint64

+ EncryptOK uint64

+ EncryptedPeers int

+ Endpoint string

+ HandshakePendingCount int

+ Hostname string

+ Identity bool

+ MOTD string

+ Networks []NetworkMembership

+ NodeID uint32

+ PeerList []PeerInfo

+ Peers int

+ PktsRecv uint64

+ PktsSent uint64

+ Ports int

+ PublicKey string

+ RelayPeerCount int

+ Uptime time.Duration

+ Version string

+ WebhookCircuitSkips uint64

+ WebhookQueueDropped uint64

+ type Event = daemonapi.Event

+ type HandshakePendingRecord = daemonapi.HandshakePendingRecord

+ type HandshakeService = daemonapi.HandshakeService

+ type HandshakeTrustRecord = daemonapi.HandshakeTrustRecord

+ type IPCServer struct

+ func NewIPCServer(socketPath string, d *Daemon) *IPCServer

+ func (s *IPCServer) Close() error

+ func (s *IPCServer) DeliverDatagram(srcAddr protocol.Addr, srcPort uint16, dstPort uint16, data []byte)

+ func (s *IPCServer) Start() error

+ type IncomingPacket struct

+ From *net.UDPAddr

+ Packet *protocol.Packet

+ type Listener struct

+ AcceptCh chan *Connection

+ Port uint16

+ func (ln *Listener) TrySend(conn *Connection) bool

+ type ManagedEngine struct

+ func NewManagedEngine(netID uint16, rules *registry.NetworkRules, d *Daemon) *ManagedEngine

+ func (me *ManagedEngine) Bootstrap() error

+ func (me *ManagedEngine) ForceCycle() map[string]interface{}

+ func (me *ManagedEngine) Start()

+ func (me *ManagedEngine) Status() map[string]interface{}

+ func (me *ManagedEngine) Stop()

+ type NetworkMembership struct

+ Address string

+ NetworkID uint16

+ type PeerInfo struct

+ Authenticated bool

+ Encrypted bool

+ Endpoint string

+ NodeID uint32

+ Relay bool

+ type PolicyEventType = daemonapi.PolicyEventType

+ type PolicyManager = daemonapi.PolicyManager

+ type PolicyRunner = daemonapi.PolicyRunner

+ type PortManager struct

+ func NewPortManager() *PortManager

+ func (pm *PortManager) ActiveNodeIDs() map[uint32]bool

+ func (pm *PortManager) AllConnections() []*Connection

+ func (pm *PortManager) AllocEphemeralPort() uint16

+ func (pm *PortManager) Bind(port uint16) (*Listener, error)

+ func (pm *PortManager) ConnectionCountForPort(port uint16) int

+ func (pm *PortManager) ConnectionList() []ConnectionInfo

+ func (pm *PortManager) FindConnection(localPort uint16, remoteAddr protocol.Addr, remotePort uint16) *Connection

+ func (pm *PortManager) GetConnection(id uint32) *Connection

+ func (pm *PortManager) GetListener(port uint16) *Listener

+ func (pm *PortManager) IdleConnections(maxIdle time.Duration) []*Connection

+ func (pm *PortManager) NewConnection(localPort uint16, remoteAddr protocol.Addr, remotePort uint16) *Connection

+ func (pm *PortManager) RemoveConnection(id uint32)

+ func (pm *PortManager) StaleConnections(timeWaitDur time.Duration) []*Connection

+ func (pm *PortManager) TotalActiveConnections() int

+ func (pm *PortManager) Unbind(port uint16)

+ type SACKBlock struct

+ Left uint32

+ Right uint32

+ func DecodeSACK(data []byte) ([]SACKBlock, bool)

+ type TrustChecker = daemonapi.TrustChecker

+ type TunnelManager struct

+ BytesRecv uint64

+ BytesSent uint64

+ EncryptFail uint64

+ EncryptOK uint64

+ PendingDrops uint64

+ PktsRecv uint64

+ PktsSent uint64

+ func NewTunnelManager() *TunnelManager

+ func (tm *TunnelManager) AddPeer(nodeID uint32, addr *net.UDPAddr)

+ func (tm *TunnelManager) ClearLastRekeyReq(peerNodeID uint32)

+ func (tm *TunnelManager) ClearRekeyGaveUp(peerNodeID uint32)

+ func (tm *TunnelManager) Close() error

+ func (tm *TunnelManager) ConnectCompat(ctx context.Context, cfg ConnectCompatConfig) error

+ func (tm *TunnelManager) DropCrypto(peerNodeID uint32)

+ func (tm *TunnelManager) EnableEncryption() error

+ func (tm *TunnelManager) HasCrypto(nodeID uint32) bool

+ func (tm *TunnelManager) HasPeer(nodeID uint32) bool

+ func (tm *TunnelManager) IsEncrypted(nodeID uint32) bool

+ func (tm *TunnelManager) IsRelayPeer(nodeID uint32) bool

+ func (tm *TunnelManager) IsRelayPinned(nodeID uint32) bool

+ func (tm *TunnelManager) LastDirectRecv(nodeID uint32) time.Time

+ func (tm *TunnelManager) LastOutboundSend(nodeID uint32) (time.Time, bool)

+ func (tm *TunnelManager) Listen(addr string) error

+ func (tm *TunnelManager) LocalAddr() net.Addr

+ func (tm *TunnelManager) PeerCount() int

+ func (tm *TunnelManager) PeerList() []PeerInfo

+ func (tm *TunnelManager) RecvCh() <-chan *IncomingPacket

+ func (tm *TunnelManager) RegisterWithBeacon()

+ func (tm *TunnelManager) RelayPeerIDs() []uint32

+ func (tm *TunnelManager) RemovePeer(nodeID uint32)

+ func (tm *TunnelManager) RequestHolePunch(targetNodeID uint32)

+ func (tm *TunnelManager) Send(nodeID uint32, pkt *protocol.Packet) error

+ func (tm *TunnelManager) SendDirectProbe(nodeID uint32, pkt *protocol.Packet) error

+ func (tm *TunnelManager) SendDirectProbeTo(nodeID uint32, addr *net.UDPAddr, pkt *protocol.Packet) error

+ func (tm *TunnelManager) SendTo(addr *net.UDPAddr, nodeID uint32, pkt *protocol.Packet) error

+ func (tm *TunnelManager) SetBeaconAddr(addr string) error

+ func (tm *TunnelManager) SetEventBus(bus *inProcessBus)

+ func (tm *TunnelManager) SetIdentity(id *crypto.Identity)

+ func (tm *TunnelManager) SetNodeID(id uint32)

+ func (tm *TunnelManager) SetPeerVerifyFunc(fn func(uint32) (ed25519.PublicKey, error))

+ func (tm *TunnelManager) SetRekeyWhitelist(nodeIDs []uint32)

+ func (tm *TunnelManager) SetRekeyWhitelistMatchAll(on bool)

+ func (tm *TunnelManager) SetRelayPeer(nodeID uint32, relay bool)

+ func (tm *TunnelManager) SetRelayPeerPinned(nodeID uint32, relay bool)

+ func (tm *TunnelManager) SetReplyWhitelist(nodeIDs []uint32)

+ func (tm *TunnelManager) SetReplyWhitelistMatchAll(on bool)

+ type WebhookManager = daemonapi.WebhookManager

+ type WebhookStats = daemonapi.WebhookStats

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL