René's URL Explorer Experiment

Title: Migrate WireGuard engine from wireguard-go to gotatun (Rust) by kasnder · Pull Request #594 · TrackerControl/tracker-control-android · GitHub

Open Graph Title: Migrate WireGuard engine from wireguard-go to gotatun (Rust) by kasnder · Pull Request #594 · TrackerControl/tracker-control-android

X Title: Migrate WireGuard engine from wireguard-go to gotatun (Rust) by kasnder · Pull Request #594 · TrackerControl/tracker-control-android

Description: Summary Replaces the Go wgbridge module (wireguard-go via gomobile) with a new Rust crate wgbridge-rs/ embedding gotatun 0.7.2, Mullvad's WireGuard® implementation, and removes the Go toolchain from the repo and CI entirely. Motivation: tunnel instability when roaming across networks/borders or under long uptime, higher battery drain, and reduced throughput. Mullvad hit the same wall — over 85% of their app crashes originated in wireguard-go, and after shipping gotatun to all Android users their user-perceived crash rate dropped from 0.40% to 0.01% (announcement). What changed wgbridge-rs/ — gotatun with custom transports for TrackerControl's unusual packet path: IpRecv over the socketpair written by the C hijack (ip.c), IpSend to the VpnService TUN fd with the passive DNS inspection ported from dns.go (test vectors included), and a VpnService.protect()-ed UDP factory that fails closed. Hand-written Java bindings in net.kollnig.missioncontrol.wgbridge with the same API shape as the gomobile-generated classes — WgEgress, the profile generators, and key rotation needed no call-site changes. Roaming fixes (the actual user-facing symptom): on network change or a broken-tunnel verdict, the bridge now rebinds the UDP sockets onto the new default network and re-resolves the peer endpoint (bypassing the 5-min cache) via new Tunnel.rebind() / Tunnel.updateEndpoint() — instead of tearing down and re-handshaking. Escalates to a full restart only if the tunnel breaks again within 90s. Build/CI — wgbridgeBuild Gradle task drives cargo-ndk for all four ABIs with 16KB-aligned LOAD segments (Android 15+); CI installs Rust instead of Go and runs cargo test. Contributor and F-Droid prerequisites documented in wgbridge-rs/README.md. Testing cargo test: 16/16 (DNS parser incl. compression pointers and IPv6 extension headers, UAPI config parsing, X25519 keys incl. RFC 7748 vector) ./gradlew testGithubDebugUnitTest: passes, existing connectivity-monitor tests unchanged ./gradlew assembleGithubDebug: APK bundles libwgbridge.so for all four ABIs (~0.8–1.3 MB each, vs the multi-MB Go runtime), zero Go artifacts, 16KB alignment verified with llvm-readelf ⚠️ Not yet done: on-device end-to-end testing (handshake, Wi-Fi↔cellular roaming recovery, DNS answers reaching the tracker mapping, multi-hour uptime) Notes gotatun is pinned to =0.7.2; its transport traits are the pre-1.0 surface most likely to change. gotatun has no direct "send keepalive now" API, so the monitor's prod pulses persistent_keepalive to 1s and restores it; rebind is triggered by a listen-port toggle that forces gotatun's connection re-setup through our protecting socket factory. 🤖 Generated with Claude Code

Open Graph Description: Summary Replaces the Go wgbridge module (wireguard-go via gomobile) with a new Rust crate wgbridge-rs/ embedding gotatun 0.7.2, Mullvad's WireGuard® implementation, and removes the Go toolchain...

X Description: Summary Replaces the Go wgbridge module (wireguard-go via gomobile) with a new Rust crate wgbridge-rs/ embedding gotatun 0.7.2, Mullvad's WireGuard® implementation, and removes the Go toolc...

Opengraph URL: https://github.com/TrackerControl/tracker-control-android/pull/594

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width