Module overlay 

Overlay-network configuration types shared across ZLayer crates.

Mode status:

• OverlayMode::Shared is fully implemented (single cluster WireGuard interface carrying multiple service subnets via multi-CIDR AllowedIPs, per-node Linux bridges per service).
• OverlayMode::Dedicated is implemented: each service gets its own per-service WireGuard transport with an isolated crypto context.
• OverlayMode::Auto is the default. It resolves to Shared — there is no telemetry heuristic yet (bandwidth budgets, NIC capabilities, per-node interface caps) to pick Dedicated automatically. A future round will wire a real heuristic.

Every consumer of OverlayMode MUST go through OverlayMode::resolve before acting on the value, so the resolution surface is uniform.

Structs

OverlayConfig

Per-service overlay configuration, populated from the service spec.

Enums

OverlayMode

How the daemon places a service’s overlay attachment.