JackDoan d3779b6a39 ecn: CE-mark on decap when the receive queue runs deep (nebula-as-AQM) ...

The tunnel's real bottleneck queue - the UDP receive buffer feeding the
decrypt loop - is invisible to every kernel AQM, so under overload it
regulates ECN-capable flows with tail-drop loss like it's 1993. Sample
SK_MEMINFO once per recvmmsg batch (tunnels.ecn_mark_threshold, fraction
of rcvbuf, 0=off) and treat depth beyond the threshold as an outer CE:
the existing RFC 6040 fold then CE-marks ECT inner packets and senders
back off without loss.

2026-07-31 13:09:50 -05:00

..

go_service

Switch to slog, remove logrus (#1672)

2026-04-27 09:41:47 -05:00

service_scripts

Document rootless Nebula in example service script (#1814)

2026-07-21 19:32:33 -04:00

config.yml

ecn: CE-mark on decap when the receive queue runs deep (nebula-as-AQM)

2026-07-31 13:09:50 -05:00