noisysockets

README

Noisy Sockets

Noisy Sockets is a secure service-to-service communications library based on the Noise Protocol Framework. Endpoints are identified by Curve25519 public keys, traffic is encrypted and authenticated using ChaCha20-Poly1305, and sent/received as UDP packets. Noisy Sockets is wire compatible with WireGuard.

Noisy Sockets implements a drop-in replacement for the standard Go net.Conn interface, allowing it to be used with any existing Go code that uses TCP/IP sockets. It also provides a net.Listener implementation for accepting incoming connections. This is implemented using a userspace TCP/IP stack based on Netstack from the gVisor project.

Noisy Sockets is based on code originally from the WireGuard Go project.

Usage

An example of how to use Noisy Sockets can be found in the examples directory.

gVisor Dependency

When you import Noisy Sockets Go Modules will attempt to use the gVisor master branch. The master branch cannot be used as a library, so you will need to explictly import the synthetic go branch in your project. If you don't do this you will see some strange build errors.

go get -u gvisor.dev/gvisor@go

Performance

Surprisingly good, I've been able to saturate a 1Gbps link with approximately two CPU cores and a single noisy socket. Interestingly it appears to outperform the kernel implementation of WireGuard.

Some preliminary benchmark results can be found in the benchmark directory.

Documentation

Index

• type DialContextFn
• type NoisySocket
  • func NewNoisySocket(logger *slog.Logger, conf *v1alpha1.Config) (*NoisySocket, error)
  • func (s *NoisySocket) Close() error
  • func (n NoisySocket) Dial(network, address string) (net.Conn, error)
  • func (n NoisySocket) DialContext(ctx context.Context, network, address string) (net.Conn, error)
  • func (n NoisySocket) Listen(network, address string) (net.Listener, error)
  • func (n NoisySocket) LookupHostContext(ctx context.Context, host string) ([]string, error)

Types

type DialContextFn

type DialContextFn func(ctx context.Context, network, address string) (net.Conn, error)

type NoisySocket

type NoisySocket struct {
	// contains filtered or unexported fields
}

NoisySocket is a noisy socket, it exposes Dial() and Listen() methods compatible with the net package.

func NewNoisySocket

func NewNoisySocket(logger *slog.Logger, conf *v1alpha1.Config) (*NoisySocket, error)

NewNoisySocket creates a new NoisySocket.

func (*NoisySocket) Close

func (s *NoisySocket) Close() error

Close closes the socket.

func (NoisySocket) Dial

func (n NoisySocket) Dial(network, address string) (net.Conn, error)

Dial creates a network connection.

func (NoisySocket) DialContext

func (n NoisySocket) DialContext(ctx context.Context, network, address string) (net.Conn, error)

DialContext creates a network connection with a context.

func (NoisySocket) Listen

func (n NoisySocket) Listen(network, address string) (net.Listener, error)

Listen creates a network listener.

func (NoisySocket) LookupHostContext

func (n NoisySocket) LookupHostContext(ctx context.Context, host string) ([]string, error)

LookupHost resolves host names (encoded public keys) to IP addresses.