Add comment to explain working boundaries

This commit is contained in:
riccardom
2026-08-24 13:58:22 +02:00
parent 33559114db
commit 2eb110f610

View File

@@ -27,6 +27,11 @@ const (
// REKEY_AFTER_TIME ~120s) so the rotation's own traffic — which itself renews the
// activity signal — ages out before the next rekey, letting an idle tunnel stop
// rotating instead of self-sustaining.
//
// INVARIANT: rotationActivityWindow < the gap between OnDataPathRekeyed calls. That
// gap converges to the WireGuard rehandshake interval (REKEY_AFTER_TIME 120s). Setting
// rotationActivityWindow to a value higher than 120s will make the rotation
// self-sustain (preventing going back to idle). Margin here is ~30s.
rotationActivityWindow = 90 * time.Second
)