Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support multiple UDP source ports (multiport) #768

Open
wants to merge 16 commits into
base: master
Choose a base branch
from
Open

Commits on Oct 17, 2022

  1. Support multiple UDP source ports (multiport)

    The goal of this work is to send packets between two hosts using more than one
    5-tuple. When running on networks like AWS where the underlying network driver
    and overlay fabric makes routing, load balancing, and failover decisions based
    on the flow hash, this enables more than one flow between pairs of hosts.
    
    Multiport spreads outgoing UDP packets across multiple UDP send ports,
    which allows nebula to work around any issues on the underlay network.
    Some example issues this could work around:
    
    - UDP rate limits on a per flow basis.
    - Partial underlay network failure in which some flows work and some don't
    
    Agreement is done during the handshake to decide if multiport mode will
    be used for a given tunnel (one side must have tx_enabled set, the other
    side must have rx_enabled set)
    
    NOTE: you cannot use multiport on a host if you are relying on UDP hole
    punching to get through a NAT or firewall.
    
    NOTE: Linux only (uses raw sockets to send). Also currently only works
    with IPv4 underlay network remotes.
    
    This is implemented by opening a raw socket and sending packets with
    a source port that is based on a hash of the overlay source/destiation
    port. For ICMP and Nebula metadata packets, we use a random source port.
    
    Example configuration:
    
        multiport:
          # This host support sending via multiple UDP ports.
          tx_enabled: false
    
          # This host supports receiving packets sent from multiple UDP ports.
          rx_enabled: false
    
          # How many UDP ports to use when sending. The lowest source port will be
          # listen.port and go up to (but not including) listen.port + tx_ports.
          tx_ports: 100
    
          # NOTE: All of your hosts must be running a version of Nebula that supports
          # multiport if you want to enable this feature. Older versions of Nebula
          # will be confused by these multiport handshakes.
          #
          # If handshakes are not getting a response, attempt to transmit handshakes
          # using random UDP source ports (to get around partial underlay network
          # failures).
          tx_handshake: false
    
          # How many unresponded handshakes we should send before we attempt to
          # send multiport handshakes.
          tx_handshake_delay: 2
    wadey committed Oct 17, 2022
    Configuration menu
    Copy the full SHA
    326fc87 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    6d8e939 View commit details
    Browse the repository at this point in the history

Commits on Mar 13, 2023

  1. Configuration menu
    Copy the full SHA
    aec7f5f View commit details
    Browse the repository at this point in the history

Commits on Apr 3, 2023

  1. Configuration menu
    Copy the full SHA
    e71059a View commit details
    Browse the repository at this point in the history

Commits on May 3, 2023

  1. Configuration menu
    Copy the full SHA
    28ecfcb View commit details
    Browse the repository at this point in the history

Commits on May 9, 2023

  1. Configuration menu
    Copy the full SHA
    0e593ad View commit details
    Browse the repository at this point in the history

Commits on May 17, 2023

  1. Configuration menu
    Copy the full SHA
    a2b9747 View commit details
    Browse the repository at this point in the history

Commits on Oct 27, 2023

  1. Configuration menu
    Copy the full SHA
    f2aef0d View commit details
    Browse the repository at this point in the history

Commits on Jan 26, 2024

  1. Merge tag 'v1.8.2' into multiport

    1.8.2 Release
    wadey committed Jan 26, 2024
    Configuration menu
    Copy the full SHA
    659d7fe View commit details
    Browse the repository at this point in the history
  2. fix android builds

    wadey committed Jan 26, 2024
    Configuration menu
    Copy the full SHA
    b033267 View commit details
    Browse the repository at this point in the history
  3. fix e2e

    wadey committed Jan 26, 2024
    Configuration menu
    Copy the full SHA
    05405bc View commit details
    Browse the repository at this point in the history
  4. fix boringcrypto e2e

    wadey committed Jan 26, 2024
    Configuration menu
    Copy the full SHA
    6606124 View commit details
    Browse the repository at this point in the history

Commits on May 8, 2024

  1. Configuration menu
    Copy the full SHA
    b445d14 View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2024

  1. Configuration menu
    Copy the full SHA
    6b78e9c View commit details
    Browse the repository at this point in the history

Commits on Sep 13, 2024

  1. Merge tag 'v1.9.4' into multiport

    1.9.4 Release
    wadey committed Sep 13, 2024
    Configuration menu
    Copy the full SHA
    dabce8a View commit details
    Browse the repository at this point in the history

Commits on Oct 2, 2024

  1. fix roaming check

    We need to compare just the IPs here and not the IP+Port
    
    This is a regression with the merge of v1.9.4 and the change to
    netip.AddrPort
    
    - dabce8a
    wadey committed Oct 2, 2024
    Configuration menu
    Copy the full SHA
    7ac51c1 View commit details
    Browse the repository at this point in the history