Issues - femboy/yip - virus.ad

femboy/yip

Watch

New issue

Dependency Dashboard

#124 opened 2026-07-27 03:23:27 +00:00 by noplife 0 / 5

Follow-up: extract peer_manager mod tests into peer_manager/tests.rs

#120 opened 2026-07-26 19:21:20 +00:00 by vxfemboy

test-hygiene: run-netns-roaming.sh lacks a positive witness; 7 tunnel_netns.rs wrappers are structurally dead

#110 opened 2026-07-25 21:54:42 +00:00 by vxfemboy

test/bench: the one real WAN benchmark is not reproducible from the repo — reconstruct + commit an automated harness

#109 opened 2026-07-25 21:54:41 +00:00 by vxfemboy

refactor(yipd): split peer_manager.rs into a module directory (keep the struct whole)

#108 opened 2026-07-25 21:54:40 +00:00 by vxfemboy

ci: quality gates exclude the control-plane core (coverage skips yipd; mutation only 3 logic crates); no perf-regression gate

#107 opened 2026-07-25 21:54:39 +00:00 by vxfemboy

security(mesh): verify_record and verify_cert derive their CA anchor from different operator inputs — under-documented fail-closed footgun

#106 opened 2026-07-25 21:54:03 +00:00 by vxfemboy

security(anti-dpi): data-plane obf key is not rotated per epoch — 2^32 obf-nonce birthday bound over the whole connection lifetime

#105 opened 2026-07-25 21:54:02 +00:00 by vxfemboy

security(handshake): #34 anti-replay baseline is in-memory only — a restarted responder accepts one stale Init and learns endpoint from it

#104 opened 2026-07-25 21:54:01 +00:00 by vxfemboy

security(rendezvous): registration is replayable after TTL lapse + reg_seq resets on restart — use a wall-clock/TAI64N seq

#103 opened 2026-07-25 21:54:00 +00:00 by vxfemboy

security(mesh): resolver probes the unauthenticated PeerInfo.reflexive while verifying+discarding the record's signed endpoints; PunchTo has no record gate

#102 opened 2026-07-25 21:53:58 +00:00 by vxfemboy

security(relay): TLS-front registration is unauthenticated — any obf_psk holder hijacks a peer's relay route

#101 opened 2026-07-25 21:53:57 +00:00 by vxfemboy

REALITY: P256/P384 server-side KEX + HelloRetryRequest support (evaluate whether it's worth it)

#84 opened 2026-07-17 21:53:23 +00:00 by vxfemboy

R9+: multi-engine DPI verification harness (Zeek, Suricata, rustnet, tshark beyond nDPI)

#70 opened 2026-07-15 04:53:07 +00:00 by vxfemboy

3c.3 relay: TLS-front path has no rate limiting (per-connection RelaySend cap)

#65 opened 2026-07-14 00:59:30 +00:00 by vxfemboy

3c.3 relay: unauthenticated obf discriminator is only ~21 bits (probabilistic probe-resistance; authenticated check via #37)

#64 opened 2026-07-14 00:59:29 +00:00 by vxfemboy

3c.3 relay: idle-connection timing side-channel (classification timeout delays decoy connect)

#63 opened 2026-07-14 00:10:11 +00:00 by vxfemboy

transport=tls: single-connection pump — completed-idle slot hold + silent multi-peer drop (3c.2 follow-up)

#61 opened 2026-07-13 05:39:26 +00:00 by vxfemboy

throughput 4c: MTU-aware packetization to cut packet count (fewer per-packet syscalls / TUN / SipHash)

#59 opened 2026-07-12 23:50:06 +00:00 by vxfemboy

perf: yip-wire SipHash header-auth is ~9% of receiver CPU under load — investigate/optimize

#58 opened 2026-07-12 23:50:05 +00:00 by vxfemboy

1 2