dpibreak.git/src/platform/linux, branch v0.5.0System-wide DPI circumvention with minimal configuration
http://git.dilluti0n.com/dpibreak.git/atom?h=v0.5.02026-03-01T15:25:37Zlog: add debug!/info!/warn!/error! macros and refactor to use it2026-03-01T15:25:37Zdilluti0nhskimse1@gmail.com2026-03-01T15:22:51Zurn:sha1:4699bf9afd69d9f2323b1fc0f6abba7aaac23cc2linux: fix rxring initialized even if fake_autottl not enabled2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-26T05:33:30Zurn:sha1:822adfe118919add1694878ec668a7962ed077c4
Conditionally initialize rxring only when fake_autottl is enabled.
Extract poll_once() using libc::poll directly; fd=-1 trick eliminates
the need for conditional branching on optional rxring fd, as poll sets
revents=0 for negative fds per POSIX. Drop nix poll feature.
linux: refactor run() into open_nfqueue/open_rxring helpers2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-26T04:03:54Zurn:sha1:1c589ea880d5022b9171b0739494af383f368119
Extract nfqueue initialization (open, bind, set O_NONBLOCK) and rxring
initialization (cBPF filter, open) into separate functions. Inline
BorrowedFd scope as a let binding to eliminate floating
q_ready/rx_ready declarations. Move SYNACK_443_CBPF const into
open_rxring.
linux: rxring: implement current_packet and advance2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-25T08:39:53Zurn:sha1:5ff44848e99f27b2095af7d8e9b98c60785ee094
- Split next_packet into current_packet (read) and advance (release)
to avoid TOCTOU between kernel overwrite and packet processing
- Add current_frame helper to avoid duplicated pointer arithmetic
- Switch AF_PACKET socket to ETH_P_ALL for future IPv6 support
- Add FRAME_SIZE comment explaining 128B is sufficient for IP header
linux: rxring: implement RxRing::new2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-25T07:05:34Zurn:sha1:cbabc7b79165f4e02e7bcc325eefc056845a0bd9linux: add rxring skeleton and integrate into run loop2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-25T06:15:34Zurn:sha1:9ac1de4587da5be42cf98382d5163ef42db9372d
- Add rxring module with RxRing struct (new/next_packet unimplemented)
- Attach cBPF filter for TCP src port 443 SYN/ACK packets
- Multiplex nfqueue and rxring via poll in run loop
- Move fake_autottl SYN/ACK handling to pkt::put_hop
linux: nftables: drop serde_json, use nft text syntax2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-26T06:52:57Zurn:sha1:d52a91f64072fa172c996474c06386ad69778aa3
100 lines of JSON soup -> 16 lines of actual nftables
linux: nftables: remove syn/ack filter from nftables2026-02-26T08:15:09Zdilluti0nhskimse1@gmail.com2026-02-25T07:21:57Zurn:sha1:1be2be03d374e04680e092ca21b413e8f2099ad3linux: iptables: implement SYN/ACK capture on --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T04:12:59Zurn:sha1:6780cc913016e0e567b20518a3577f966417b447
- Add mangle/INPUT jump to DPIBREAK
- Queue tcp sport 443 SYN/ACK packets (NFQUEUE --queue-bypass)
- Cleanup removes INPUT jump as well
linux: nftables: queue SYN/ACK on --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T03:34:13Zurn:sha1:a1618d0f7b576e55230ef709af750f2933a65db4
- simplify nftables rules by removing DPIBREAK chain