Home

Internals

Routing

wg-mesh uses iptables's connmark to track the connection originated from the local, so the connections on other non-wireguard devices will not be routed to the Wireguard tunnel.

BBR

The BBR congestion control algorithm performs well in the network environment that packet loss rate or latency is high. The congestion algorithm is implemented on the host of TCP sender and receiver. To utilize BBR for sites that use other congestion control algorithms, wg-mesh forward the traffic to a userspace proxy, so the traffic from the edge node (which runs any_proxy, a userspace proxy) to the desktop nodes are transmitted through BBR.

TODO

• Add a new function lan_to_nat_gateway for the LAN devices whose gateway is a wg-mesh host. So that it can bridge a physical router with the mesh network.
• Verify the validation/metrics in the mock network.

Known Issues

• For some kernel versions, BBR degrades the network performance. See more https://bbs.archlinux.org/viewtopic.php?id=234276. It is fixed in the default kernel of Ubuntu 20.04.
• go-any-proxy runs CPU at 100 percent if the fd number is exhausted.