chore: add GSO support for TUN

lwip had been dropped, also cgo build will be removed

listener/config/tun.go

@@ -28,6 +28,8 @@ type Tun struct {
 	RedirectToTun       []string   `yaml:"-" json:"-"`
 
 	MTU                      uint32         `yaml:"mtu" json:"mtu,omitempty"`
+	GSO                      bool           `yaml:"gso" json:"gso,omitempty"`
+	GSOMaxSize               uint32         `yaml:"gso-max-size" json:"gso-max-size,omitempty"`
 	Inet4Address             []netip.Prefix `yaml:"inet4-address" json:"inet4-address,omitempty"`
 	Inet6Address             []netip.Prefix `yaml:"inet6-address" json:"inet6-address,omitempty"`
 	StrictRoute              bool           `yaml:"strict-route" json:"strict-route,omitempty"`
@@ -35,6 +37,8 @@ type Tun struct {
 	Inet6RouteAddress        []netip.Prefix `yaml:"inet6-route-address" json:"inet6-route-address,omitempty"`
 	Inet4RouteExcludeAddress []netip.Prefix `yaml:"inet4-route-exclude-address" json:"inet4-route-exclude-address,omitempty"`
 	Inet6RouteExcludeAddress []netip.Prefix `yaml:"inet6-route-exclude-address" json:"inet6-route-exclude-address,omitempty"`
+	IncludeInterface         []string       `yaml:"include-interface" json:"include-interface,omitempty"`
+	ExcludeInterface         []string       `yaml:"exclude-interface" json:"exclude-interface,omitempty"`
 	IncludeUID               []uint32       `yaml:"include-uid" json:"include-uid,omitempty"`
 	IncludeUIDRange          []string       `yaml:"include-uid-range" json:"include-uid-range,omitempty"`
 	ExcludeUID               []uint32       `yaml:"exclude-uid" json:"exclude-uid,omitempty"`

listener/inbound/tun.go

@@ -19,6 +19,8 @@ type TunOption struct {
 	AutoDetectInterface bool     `inbound:"auto-detect-interface,omitempty"`
 
 	MTU                      uint32   `inbound:"mtu,omitempty"`
+	GSO                      bool     `inbound:"gso,omitempty"`
+	GSOMaxSize               uint32   `inbound:"gso-max-size,omitempty"`
 	Inet4Address             []string `inbound:"inet4_address,omitempty"`
 	Inet6Address             []string `inbound:"inet6_address,omitempty"`
 	StrictRoute              bool     `inbound:"strict_route,omitempty"`
@@ -26,6 +28,8 @@ type TunOption struct {
 	Inet6RouteAddress        []string `inbound:"inet6_route_address,omitempty"`
 	Inet4RouteExcludeAddress []string `inbound:"inet4_route_exclude_address,omitempty"`
 	Inet6RouteExcludeAddress []string `inbound:"inet6_route_exclude_address,omitempty"`
+	IncludeInterface         []string `inbound:"include-interface,omitempty"`
+	ExcludeInterface         []string `inbound:"exclude-interface" json:"exclude-interface,omitempty"`
 	IncludeUID               []uint32 `inbound:"include_uid,omitempty"`
 	IncludeUIDRange          []string `inbound:"include_uid_range,omitempty"`
 	ExcludeUID               []uint32 `inbound:"exclude_uid,omitempty"`
@@ -93,6 +97,8 @@ func NewTun(options *TunOption) (*Tun, error) {
 			AutoRoute:                options.AutoRoute,
 			AutoDetectInterface:      options.AutoDetectInterface,
 			MTU:                      options.MTU,
+			GSO:                      options.GSO,
+			GSOMaxSize:               options.GSOMaxSize,
 			Inet4Address:             inet4Address,
 			Inet6Address:             inet6Address,
 			StrictRoute:              options.StrictRoute,
@@ -100,6 +106,8 @@ func NewTun(options *TunOption) (*Tun, error) {
 			Inet6RouteAddress:        inet6RouteAddress,
 			Inet4RouteExcludeAddress: inet4RouteExcludeAddress,
 			Inet6RouteExcludeAddress: inet6RouteExcludeAddress,
+			IncludeInterface:         options.IncludeInterface,
+			ExcludeInterface:         options.ExcludeInterface,
 			IncludeUID:               options.IncludeUID,
 			IncludeUIDRange:          options.IncludeUIDRange,
 			ExcludeUID:               options.ExcludeUID,

listener/listener.go

@@ -818,6 +818,8 @@ func hasTunConfigChange(tunConf *LC.Tun) bool {
 		LastTunConf.AutoRoute != tunConf.AutoRoute ||
 		LastTunConf.AutoDetectInterface != tunConf.AutoDetectInterface ||
 		LastTunConf.MTU != tunConf.MTU ||
+		LastTunConf.GSO != tunConf.GSO ||
+		LastTunConf.GSOMaxSize != tunConf.GSOMaxSize ||
 		LastTunConf.StrictRoute != tunConf.StrictRoute ||
 		LastTunConf.EndpointIndependentNat != tunConf.EndpointIndependentNat ||
 		LastTunConf.UDPTimeout != tunConf.UDPTimeout ||
@@ -857,6 +859,14 @@ func hasTunConfigChange(tunConf *LC.Tun) bool {
 		return tunConf.Inet6RouteExcludeAddress[i].String() < tunConf.Inet6RouteExcludeAddress[j].String()
 	})
 
+	sort.Slice(tunConf.IncludeInterface, func(i, j int) bool {
+		return tunConf.IncludeInterface[i] < tunConf.IncludeInterface[j]
+	})
+
+	sort.Slice(tunConf.ExcludeInterface, func(i, j int) bool {
+		return tunConf.ExcludeInterface[i] < tunConf.ExcludeInterface[j]
+	})
+
 	sort.Slice(tunConf.IncludeUID, func(i, j int) bool {
 		return tunConf.IncludeUID[i] < tunConf.IncludeUID[j]
 	})
@@ -892,6 +902,8 @@ func hasTunConfigChange(tunConf *LC.Tun) bool {
 		!slices.Equal(tunConf.Inet6RouteAddress, LastTunConf.Inet6RouteAddress) ||
 		!slices.Equal(tunConf.Inet4RouteExcludeAddress, LastTunConf.Inet4RouteExcludeAddress) ||
 		!slices.Equal(tunConf.Inet6RouteExcludeAddress, LastTunConf.Inet6RouteExcludeAddress) ||
+		!slices.Equal(tunConf.IncludeInterface, LastTunConf.IncludeInterface) ||
+		!slices.Equal(tunConf.ExcludeInterface, LastTunConf.ExcludeInterface) ||
 		!slices.Equal(tunConf.IncludeUID, LastTunConf.IncludeUID) ||
 		!slices.Equal(tunConf.IncludeUIDRange, LastTunConf.IncludeUIDRange) ||
 		!slices.Equal(tunConf.ExcludeUID, LastTunConf.ExcludeUID) ||

listener/sing_tun/server.go

@@ -94,6 +94,9 @@ func New(options LC.Tun, tunnel C.Tunnel, additions ...inbound.Addition) (l *Lis
 			inbound.WithSpecialRules(""),
 		}
 	}
+	if options.GSOMaxSize == 0 {
+		options.GSOMaxSize = 65536
+	}
 	tunName := options.Device
 	if tunName == "" || !checkTunName(tunName) {
 		tunName = CalculateInterfaceName(InterfaceName)
@@ -204,6 +207,8 @@ func New(options LC.Tun, tunnel C.Tunnel, additions ...inbound.Addition) (l *Lis
 	tunOptions := tun.Options{
 		Name:                     tunName,
 		MTU:                      tunMTU,
+		GSO:                      options.GSO,
+		GSOMaxSize:               options.GSOMaxSize,
 		Inet4Address:             options.Inet4Address,
 		Inet6Address:             options.Inet6Address,
 		AutoRoute:                options.AutoRoute,
@@ -212,6 +217,8 @@ func New(options LC.Tun, tunnel C.Tunnel, additions ...inbound.Addition) (l *Lis
 		Inet6RouteAddress:        options.Inet6RouteAddress,
 		Inet4RouteExcludeAddress: options.Inet4RouteExcludeAddress,
 		Inet6RouteExcludeAddress: options.Inet6RouteExcludeAddress,
+		IncludeInterface:         options.IncludeInterface,
+		ExcludeInterface:         options.ExcludeInterface,
 		IncludeUID:               includeUID,
 		ExcludeUID:               excludeUID,
 		IncludeAndroidUser:       options.IncludeAndroidUser,
@@ -236,10 +243,7 @@ func New(options LC.Tun, tunnel C.Tunnel, additions ...inbound.Addition) (l *Lis
 	stackOptions := tun.StackOptions{
 		Context:                context.TODO(),
 		Tun:                    tunIf,
-		MTU:                    tunOptions.MTU,
-		Name:                   tunOptions.Name,
-		Inet4Address:           tunOptions.Inet4Address,
-		Inet6Address:           tunOptions.Inet6Address,
+		TunOptions:             tunOptions,
 		EndpointIndependentNat: options.EndpointIndependentNat,
 		UDPTimeout:             udpTimeout,
 		Handler:                handler,
@@ -248,7 +252,7 @@ func New(options LC.Tun, tunnel C.Tunnel, additions ...inbound.Addition) (l *Lis
 
 	if options.FileDescriptor > 0 {
 		if tunName, err := getTunnelName(int32(options.FileDescriptor)); err != nil {
-			stackOptions.Name = tunName
+			stackOptions.TunOptions.Name = tunName
 			stackOptions.ForwarderBindInterface = true
 		}
 	}