@decentnetwork/lan 0.1.133 → 0.1.135

package/dist/proxy/multi-exit-router.js

@@ -83,6 +83,10 @@ const HEALTH_TIMEOUT_MS = 4000;
 // of transient jitter on a long-haul path (don't blackout a region on one blip).
 const DOWN_AFTER_FAILS = 3;
 const CONNECT_TIMEOUT_MS = 8000;
+// An exit that carried a real tunnel within this window is treated as healthy
+// regardless of what the synthetic probe says (the probe adds load and flaps on
+// a busy/jittery exit; live traffic is the truth).
+const RECENT_SUCCESS_MS = 10_000;
 /**
  * Start the multi-exit router. Returns a stop() that closes the listener.
  * Runs until stopped (the CLI command keeps the process alive).
@@ -108,6 +112,7 @@ export function startMultiExitRouter(opts) {
         active: 0,
         served: 0,
         lastRtt: null,
+        lastSuccessMs: null,
     }));
     // Per-host routing decision, logged once on first sight so the user can SEE
     // why a hostname went DIRECT vs through a region (e.g. a CCTV video CDN that
@@ -170,6 +175,13 @@ export function startMultiExitRouter(opts) {
                     }
                 }
                 else {
+                    // A probe miss does NOT mark an exit down while real tunnels are still
+                    // succeeding through it — live traffic overrides the synthetic probe.
+                    const liveTraffic = exit.lastSuccessMs !== null && Date.now() - exit.lastSuccessMs < RECENT_SUCCESS_MS;
+                    if (liveTraffic) {
+                        exit.fails = 0;
+                        continue;
+                    }
                     exit.fails++;
                     exit.oks = 0;
                     if (exit.healthy && exit.fails >= DOWN_AFTER_FAILS) {
@@ -184,8 +196,12 @@ export function startMultiExitRouter(opts) {
     }
     // ---- exit selection (scoped to one region) --------------------------------
     function pickOrder(region) {
+        const now = Date.now();
+        // An exit is usable if the probe says healthy OR it carried a real tunnel
+        // recently (live traffic beats a flapping probe).
+        const isUp = (e) => e.healthy || (e.lastSuccessMs !== null && now - e.lastSuccessMs < RECENT_SUCCESS_MS);
         const inRegion = exits.filter((e) => e.region === region);
-        const healthy = inRegion.filter((e) => e.healthy);
+        const healthy = inRegion.filter(isUp);
         // Best-effort fallback: if NO exit currently passes health checks but the
         // region HAS exits, try them anyway instead of 503-ing the user. A single
         // high-latency exit under load makes the probe flap DOWN/UP every few
@@ -230,6 +246,16 @@ export function startMultiExitRouter(opts) {
                 established = true;
                 exit.active++;
                 exit.served++;
+                // Live traffic proves the exit is up — clear any probe-driven failure
+                // and mark it healthy so a flapping probe can't take it DOWN while
+                // tunnels are flowing.
+                exit.lastSuccessMs = Date.now();
+                exit.fails = 0;
+                if (!exit.healthy) {
+                    exit.healthy = true;
+                    log(`✓ ${exit.name} [${exit.region}] UP (live traffic)`);
+                    printPool();
+                }
                 up.setTimeout(0);
                 client.write("HTTP/1.1 200 Connection Established\r\n\r\n");
                 if (head && head.length)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.133",
+  "version": "0.1.135",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",
@@ -79,7 +79,7 @@
   },
   "dependencies": {
     "@decentnetwork/dora": "^0.1.11",
-    "@decentnetwork/peer": "^0.1.69",
+    "@decentnetwork/peer": "^0.1.70",
     "ink": "^5.2.1",
     "js-yaml": "^4.1.0",
     "react": "^18.3.1",