@decentnetwork/lan 0.1.257 → 0.1.259

package/dist/router/packet-router.js

@@ -17,6 +17,12 @@ const RATE_REPORT_INTERVAL_MS = 1000;
 // pacing a trickle (SSH/keepalives), and it keeps reports sparse. The pacer's
 // loss window derives its verdict from these reports vs. what it sent.
 const RATE_REPORT_MIN_BYTES = 32 * 1024; // ~256 kbps sustained
+/** Session keepalive: one zero byte on the data channel.
+ *
+ *  Deliberately not a valid IP packet — the receiver recognises and swallows
+ *  it. It exists only to keep the Carrier session warm, so it must never be
+ *  counted as forwarded traffic OR as a drop. */
+const KEEPALIVE_PACKET = new Uint8Array([0]);
 export class PacketRouter extends EventEmitter {
     tunDevice;
     peerManager;
@@ -198,7 +204,7 @@ export class PacketRouter extends EventEmitter {
             if (!session?.isConnected())
                 continue;
             try {
-                await session.send(new Uint8Array([0])); // 1-byte keepalive, dropped at receiver
+                await session.send(KEEPALIVE_PACKET);
             }
             catch {
                 // ignore — session may have just gone offline
@@ -345,8 +351,30 @@ export class PacketRouter extends EventEmitter {
             return;
         const parsed = IpParser.parse(packet);
         if (!parsed) {
-            this.stats.packetsDropped++;
-            this.logger.debug("Dropped invalid incoming IP packet");
+            // Classify instead of lumping. IpParser returns null for three very
+            // different situations and they need different fixes: a short packet
+            // means the transport handed us a truncated frame (MTU / reassembly),
+            // while IPv6 means the SENDER is forwarding traffic we never support --
+            // one is a bug in us, the other is a filter missing upstream. Recording
+            // it per-source also makes it visible in `agentnet diag`, which is how
+            // this stayed hidden: the old code bumped the counter and logged at
+            // debug, so tens of thousands of drops had neither reason nor owner.
+            // OUR OWN keepalive, not a loss. sendKeepalivesToActiveSessions emits a
+            // single zero byte on the data channel and the receiver was counting
+            // every one of them as a dropped packet: 24015 "drops" on mac-dev with
+            // only ~2038 attributable, 16919 on cn against 5. That made the drop
+            // metric useless exactly when it was needed to explain real packet loss,
+            // and sent this investigation down a wrong path first. Swallow it
+            // silently — it did its job by arriving.
+            if (packet.length === KEEPALIVE_PACKET.length && packet[0] === KEEPALIVE_PACKET[0]) {
+                return;
+            }
+            const reason = packet.length < 20
+                ? "inbound-too-short"
+                : ((packet[0] >> 4) & 0x0f) !== 4
+                    ? "inbound-not-ipv4"
+                    : "inbound-bad-header";
+            this.recordDrop(`from:${srcPubkey.slice(0, 12)}`, reason, `len=${packet.length}`);
             return;
         }
         // Auto-learn (srcPubkey -> srcIp) into IPAM. Without this, ubuntu

package/dist/router/types.d.ts

@@ -18,7 +18,7 @@ export declare const IP_PROTO_ICMP = 1;
  * isn't my ping working?" — without forcing them to crank up the
  * log level.
  */
-export type DropReason = "invalid-ip" | "no-port" | "no-ipam-record" | "friend-offline" | "handshake-failed" | "send-failed" | "tun-write-failed" | "tun-down";
+export type DropReason = "invalid-ip" | "inbound-too-short" | "inbound-not-ipv4" | "inbound-bad-header" | "no-port" | "no-ipam-record" | "friend-offline" | "handshake-failed" | "send-failed" | "tun-write-failed" | "tun-down";
 export interface DstDropInfo {
     /** Total drops to this destination. */
     count: number;

package/dist/ui/desktop/app.js

@@ -1,4 +1,4 @@
-window.__DK_UI_VERSION="0.1.257";
+window.__DK_UI_VERSION="0.1.259";
 const ICON_PATHS = {
   // ---- tab bar (the four must feel like one set) ----
   users: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/>',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.257",
+  "version": "0.1.259",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",
@@ -84,7 +84,7 @@
   },
   "dependencies": {
     "@decentnetwork/dora": "^0.1.14",
-    "@decentnetwork/peer": "^0.1.123",
+    "@decentnetwork/peer": "^0.1.126",
     "@decentnetwork/peer-webrtc": "^0.2.10",
     "ink": "^5.2.1",
     "js-yaml": "^4.1.0",