Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Explore gVisor Netstack #89

Closed
ignoramous opened this issue Sep 10, 2020 · 5 comments
Closed

Explore gVisor Netstack #89

ignoramous opened this issue Sep 10, 2020 · 5 comments
Assignees
Labels
P2 Priority: 2 (important)

Comments

@ignoramous
Copy link
Collaborator

ignoramous commented Sep 10, 2020

gVisor's netstack is a user-space TCP/IP implementation written in golang and, as of Sep 2020, in active development.

It might be worthwhile to explore if we could use it over tun2socks (by the way of outline-go-tun2socks -> go-tun2socks). Ref: tailscale's bradfitz has a working commit integrating netstack in to their fork of WireGuard. See also #52

@ignoramous
Copy link
Collaborator Author

Blog post: gvisor.dev/blog/network-security

@ignoramous ignoramous self-assigned this Sep 10, 2020
@ignoramous ignoramous mentioned this issue Sep 14, 2020
Closed
@ignoramous
Copy link
Collaborator Author

Jigsaw-Code/Intra#286

@ignoramous
Copy link
Collaborator Author

We pulled in gvisor and it wasn't pretty. Thankfully, tailscale, who ran into a similar problem, are now maintaining a standalone gvisor tcp/ip gomodule: https://github.com/inetaf/netstack

@ignoramous
Copy link
Collaborator Author

celzero/firestack#3

@ignoramous
Copy link
Collaborator Author

netstack exists in reality now since the v053i release (July 24, 2022).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
P2 Priority: 2 (important)
Projects
None yet
Development

No branches or pull requests

1 participant