Home

Internals

Routing

wg-mesh uses iptables connmark to track the connection originated from the local, so the connections on other non-wireguard devices will not be routed to the wireguard tunnel.

BBR

BBR allows the TCP quickly to bump the speed to the bandwidth limit resulted in the less first loading time when watching videos. BBR also does not prone to throttle in the lossy network. But some websites do not use BBR as the congestion control algorithm. To utilize BBR, iptables redirects all the TCP connections to a userspace proxy, which does useless forwarding but with "side-effecting" that converting the TCP congestion control to the BBR configured in the OS.

TODO

• Monitor freedns-go and any_proxy and restart them in case of the crash
• Figure out what condition will trigger the kernel bug that degrades the network performance when using BBR
• Eliminate "TODO"s in the code.
• Implement the deployment script. Integrate it into CI/CD.
• Verify the validation/metrics in the mock network.