mirror of
https://github.com/netbirdio/netbird.git
synced 2026-10-04 20:49:06 +02:00
Zoltan Papp
13433af4a5
When a peer went idle under lazy connections, the WireGuard peer was removed and the wake endpoint re-armed with only the overlay allowed IPs, dropping routed prefixes installed by the route manager. The asynchronous route-watcher re-add uses update_only, which is a silent no-op while the peer is absent, so routed subnets stayed black-holed until the peer was woken by other means. Split the idle transition from the full close: Conn.Idle tears down transports, cancels pending delayed endpoint updates and updates the status without touching the WireGuard peer. The activity listener then arms the wake endpoint via the new IdlePeerEndpoint operation, which removes and re-creates the peer in a single transaction: handshake state is dropped (keeping the handshake-first wake semantics of packet staging and first-packet capture/reinjection) while the currently installed allowed IPs are preserved. The read-modify-write runs under the interface mutex, serializing it against concurrent allowed IP updates from the route manager. Conn.Close no longer takes signalToRemote: the idle transition is the only path that signals GOAWAY to the remote peer.
50 lines
1.7 KiB
Go
50 lines
1.7 KiB
Go
package internal
|
|
|
|
import (
|
|
"net"
|
|
"net/netip"
|
|
"time"
|
|
|
|
wgdevice "golang.zx2c4.com/wireguard/device"
|
|
"golang.zx2c4.com/wireguard/tun/netstack"
|
|
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
|
|
|
"github.com/netbirdio/netbird/client/iface/configurer"
|
|
"github.com/netbirdio/netbird/client/iface/device"
|
|
"github.com/netbirdio/netbird/client/iface/udpmux"
|
|
"github.com/netbirdio/netbird/client/iface/wgaddr"
|
|
"github.com/netbirdio/netbird/client/iface/wgproxy"
|
|
"github.com/netbirdio/netbird/monotime"
|
|
)
|
|
|
|
type wgIfaceBase interface {
|
|
Create() error
|
|
CreateOnAndroid(routeRange []string, ip string, domains []string) error
|
|
RenewTun(fd int) error
|
|
IsUserspaceBind() bool
|
|
Name() string
|
|
Address() wgaddr.Address
|
|
ToInterface() *net.Interface
|
|
Up() (*udpmux.UniversalUDPMuxDefault, error)
|
|
UpdateAddr(newAddr wgaddr.Address) error
|
|
GetProxy() wgproxy.Proxy
|
|
GetProxyPort() uint16
|
|
UpdatePeer(peerKey string, allowedIps []netip.Prefix, keepAlive time.Duration, endpoint *net.UDPAddr, preSharedKey *wgtypes.Key) error
|
|
RemoveEndpointAddress(key string) error
|
|
RemovePeer(peerKey string) error
|
|
IdlePeerEndpoint(peerKey string, allowedIPs []netip.Prefix, endpoint *net.UDPAddr) error
|
|
AddAllowedIP(peerKey string, allowedIP netip.Prefix) error
|
|
RemoveAllowedIP(peerKey string, allowedIP netip.Prefix) error
|
|
Close() error
|
|
SetFilter(filter device.PacketFilter) error
|
|
GetFilter() device.PacketFilter
|
|
GetDevice() *device.FilteredDevice
|
|
GetWGDevice() *wgdevice.Device
|
|
GetStats() (map[string]configurer.WGStats, error)
|
|
GetNet() *netstack.Net
|
|
FullStats() (*configurer.Stats, error)
|
|
LastActivities() map[string]monotime.Time
|
|
SetPresharedKey(peerKey string, psk wgtypes.Key, updateOnly bool) error
|
|
MTU() uint16
|
|
}
|