Issues

• Headless mode + control socket for transitd integration

  femboyisp/yip#124 · Filter by author vxfemboy opened on Sep 26, 2026

• Dependency Dashboard

  femboyisp/yip#122 · Filter by author vxfemboy opened on Jul 29, 2026

• Follow-up: extract peer_manager mod tests into peer_manager/tests.rs

  femboyisp/yip#120 · Filter by author vxfemboy opened on Jul 26, 2026

• test-hygiene: run-netns-roaming.sh lacks a positive witness; 7 tunnel_netns.rs wrappers are structurally dead

  femboyisp/yip#110 · Filter by author vxfemboy opened on Jul 25, 2026

• test/bench: the one real WAN benchmark is not reproducible from the repo — reconstruct + commit an automated harness

  femboyisp/yip#109 · Filter by author vxfemboy opened on Jul 25, 2026

• refactor(yipd): split peer_manager.rs into a module directory (keep the struct whole)

  femboyisp/yip#108 · Filter by author vxfemboy opened on Jul 25, 2026

• ci: quality gates exclude the control-plane core (coverage skips yipd; mutation only 3 logic crates); no perf-regression gate

  femboyisp/yip#107 · Filter by author vxfemboy opened on Jul 25, 2026

• security(mesh): verify_record and verify_cert derive their CA anchor from different operator inputs — under-documented fail-closed footgun

  femboyisp/yip#106 · Filter by author vxfemboy opened on Jul 25, 2026

• security(anti-dpi): data-plane obf key is not rotated per epoch — 2^32 obf-nonce birthday bound over the whole connection lifetime

  femboyisp/yip#105 · Filter by author vxfemboy opened on Jul 25, 2026

• security(handshake): #34 anti-replay baseline is in-memory only — a restarted responder accepts one stale Init and learns endpoint from it

  femboyisp/yip#104 · Filter by author vxfemboy opened on Jul 25, 2026

• security(rendezvous): registration is replayable after TTL lapse + reg_seq resets on restart — use a wall-clock/TAI64N seq

  femboyisp/yip#103 · Filter by author vxfemboy opened on Jul 25, 2026

• security(mesh): resolver probes the unauthenticated PeerInfo.reflexive while verifying+discarding the record's signed endpoints; PunchTo has no record gate

  femboyisp/yip#102 · Filter by author vxfemboy opened on Jul 25, 2026

• security(relay): TLS-front registration is unauthenticated — any obf_psk holder hijacks a peer's relay route

  femboyisp/yip#101 · Filter by author vxfemboy opened on Jul 25, 2026

• REALITY: P256/P384 server-side KEX + HelloRetryRequest support (evaluate whether it's worth it)

  enhancement
  femboyisp/yip#84 · Filter by author vxfemboy opened on Jul 17, 2026

• R9+: multi-engine DPI verification harness (Zeek, Suricata, rustnet, tshark beyond nDPI)

  femboyisp/yip#70 · Filter by author vxfemboy opened on Jul 15, 2026

• 3c.3 relay: TLS-front path has no rate limiting (per-connection RelaySend cap)

  femboyisp/yip#65 · Filter by author vxfemboy opened on Jul 14, 2026

• 3c.3 relay: unauthenticated obf discriminator is only ~21 bits (probabilistic probe-resistance; authenticated check via #37)

  femboyisp/yip#64 · Filter by author vxfemboy opened on Jul 14, 2026

• 3c.3 relay: idle-connection timing side-channel (classification timeout delays decoy connect)

  femboyisp/yip#63 · Filter by author vxfemboy opened on Jul 14, 2026

• transport=tls: single-connection pump — completed-idle slot hold + silent multi-peer drop (3c.2 follow-up)

  femboyisp/yip#61 · Filter by author vxfemboy opened on Jul 13, 2026

• throughput 4c: MTU-aware packetization to cut packet count (fewer per-packet syscalls / TUN / SipHash)

  femboyisp/yip#59 · Filter by author vxfemboy opened on Jul 12, 2026
  1

• perf: yip-wire SipHash header-auth is ~9% of receiver CPU under load — investigate/optimize

  femboyisp/yip#58 · Filter by author vxfemboy opened on Jul 12, 2026
  3

• 3c QUIC: bound inbound-connection state (accept-flood DoS hardening)

  femboyisp/yip#49 · Filter by author vxfemboy opened on Jul 9, 2026

• 2c: relayed gossip is silently dropped (relay-only members don't converge)

  enhancement
  femboyisp/yip#40 · Filter by author vxfemboy opened on Jul 7, 2026

• 2c backlog (research, no priority): decentralized threshold CA

  enhancement
  femboyisp/yip#39 · Filter by author vxfemboy opened on Jul 6, 2026

• GSO for the ARQ-retransmit egress path (currently non-GSO)

  femboyisp/yip#30 · Filter by author vxfemboy opened on Jul 3, 2026