You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Jordan Whited 7bc2ddaedc
go.mod,net/tstun,wgengine/netstack: implement gVisor TCP GSO for Linux (#12869)
This commit implements TCP GSO for packets being read from gVisor on
Linux. Windows support will follow later. The wireguard-go dependency is
updated in order to make use of newly exported GSO logic from its tun
package.

A new gVisor stack.LinkEndpoint implementation has been established
(linkEndpoint) that is loosely modeled after its predecessor
(channel.Endpoint). This new implementation supports GSO of monster TCP
segments up to 64K in size, whereas channel.Endpoint only supports up to
32K. linkEndpoint will also be required for GRO, which will be
implemented in a follow-on commit.

TCP throughput from gVisor, i.e. TUN read direction, is dramatically
improved as a result of this commit. Benchmarks show substantial
improvement through a wide range of RTT and loss conditions, sometimes
as high as 5x.

The iperf3 results below demonstrate the effect of this commit between
two Linux computers with i5-12400 CPUs. There is roughly ~13us of round
trip latency between them.

The first result is from commit 57856fc without TCP GSO.

Starting Test: protocol: TCP, 1 streams, 131072 byte blocks
- - - - - - - - - - - - - - - - - - - - - - - - -
Test Complete. Summary Results:
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  2.51 GBytes  2.15 Gbits/sec  154 sender
[  5]   0.00-10.00  sec  2.49 GBytes  2.14 Gbits/sec      receiver

The second result is from this commit with TCP GSO.

Starting Test: protocol: TCP, 1 streams, 131072 byte blocks
- - - - - - - - - - - - - - - - - - - - - - - - -
Test Complete. Summary Results:
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  12.6 GBytes  10.8 Gbits/sec    6 sender
[  5]   0.00-10.00  sec  12.6 GBytes  10.8 Gbits/sec      receiver

Updates #6816

Signed-off-by: Jordan Whited <jordan@tailscale.com>
2 months ago
..
art all: use Go 1.22 range-over-int 5 months ago
captivedetection net/captivedetection: call SetHealthy once connectivity restored (#12974) 2 months ago
connstats all: use Go 1.22 range-over-int 5 months ago
dns net/dns, cmd/tailscaled: plumb system health tracker into dns cleanup (#12969) 2 months ago
dnscache net/dnscache: use parent context to perform lookup 3 months ago
dnsfallback net/dnsfallback: set CanPort80 in static DERPMap (#12929) 2 months ago
flowtrack net/flowtrack: fix, test String method 3 months ago
ipset go.mod: bump bart 2 months ago
ktimeout net/ktimeout: add a package to set TCP user timeout 7 months ago
memnet net/memnet: export the network name (#9111) 1 year ago
netaddr all: update copyright and license headers 2 years ago
netcheck health: introduce captive-portal-detected Warnable (#12707) 2 months ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 1 year ago
netkernelconf ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot: optionally enable UDP GRO forwarding for containers (#12410) 3 months ago
netknob all: update copyright and license headers 2 years ago
netmon all: add test for package comments, fix, add comments as needed 2 months ago
netns net/netns: add Windows support for bind-to-interface-by-route 3 months ago
netstat all: add test for package comments, fix, add comments as needed 2 months ago
netutil all: add test for package comments, fix, add comments as needed 2 months ago
packet net/flowtrack: optimize Tuple type for use as map key 3 months ago
ping net/ping: fix ICMP echo code field to 0 1 year ago
portmapper all: use math/rand/v2 more 4 months ago
proxymux all: cleanup unused code, part 1 (#10661) 9 months ago
routetable net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 5 months ago
socks5 net/socks5: add password auth support 2 years ago
sockstats net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 5 months ago
speedtest all: update copyright and license headers 2 years ago
stun ci: enable checklocks workflow for specific packages 3 months ago
stunserver all: use Go 1.22 range-over-int 5 months ago
tcpinfo all: use Go 1.22 range-over-int 5 months ago
tlsdial tsd, ipnlocal, etc: add tsd.System.HealthTracker, start some plumbing 5 months ago
tsaddr net/ipset, wgengine/filter/filtertype: add split-out packages 3 months ago
tsdial go.mod: bump bart 2 months ago
tshttpproxy all: use Go 1.22 range-over-int 5 months ago
tstun go.mod,net/tstun,wgengine/netstack: implement gVisor TCP GSO for Linux (#12869) 2 months ago
wsconn ci: enable checklocks workflow for specific packages 3 months ago