gutd 2.0.0

WireGuard traffic obfuscation library — QUIC-like encapsulation, cross-platform userspace proxy, optional eBPF fast path on Linux
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

# Metrics

gutd counts events using lock-free atomic counters (`AtomicU64`, `Ordering::Relaxed`).
No feature flags. No overhead worth mentioning. Always on.

## Counters

| Counter | Description |
|---------|-------------|
| `rx_packets` / `rx_bytes` | Packets and bytes received from the wire |
| `tx_packets` / `tx_bytes` | Packets and bytes sent to the wire |
| `rx_dropped` / `tx_dropped` | Packets dropped (parse error, short read, etc.) |
| `chacha_encode_count` | ChaCha masking operations on egress |
| `chacha_decode_count` | ChaCha unmasking operations on ingress |

## Reading counters

### SIGUSR1 - print to stderr

```bash
kill -USR1 $(pidof gutd)
# or
sudo kill -USR1 $(cat /run/gutd.pid)
```

Output:
```
=== gutd Performance Metrics ===
Uptime: 3600.5s

--- Packets ---
  RX: 1234567 packets (1800000000 bytes, ...)
  TX: 1234560 packets (...)
  RX Dropped: 0 (...)
  TX Dropped: 0 (...)

--- Encryption ---
  Encryption Encode: 1234567
  Encryption Decode: 1234560

================================
```

### Stat file

When `stats_interval > 0` in `gutd.conf`, gutd atomically writes a plain-text
counters file (default `/run/gutd.stat`) at the configured interval:

```bash
cat /run/gutd.stat
# or
gutd status
# or
gutd status /run/gutd.stat
```

### Programmatic (Rust)

```rust
use gutd::metrics::METRICS;

let snap = METRICS.snapshot();
println!("rx: {} pkts {} bytes", snap.rx_packets, snap.rx_bytes);
println!("tx: {} pkts {} bytes", snap.tx_packets, snap.tx_bytes);
println!("chacha encode: {}", snap.chacha_encode_count);
```