summary refs log tree commit diff
path: root/modules/vpn
diff options
context:
space:
mode:
authorMel <mel@rnrd.eu>2026-04-23 21:22:30 +0200
committerMel <mel@rnrd.eu>2026-04-23 22:58:26 +0200
commitd5b30d49c1677762891d43eab265dd35a6daca19 (patch)
tree35a03774cd3f12ecb097978eb94dbf98b19963c4 /modules/vpn
parentf4c4a3eae96b8795834e535d1dad664179969f74 (diff)
downloadnetwork-d5b30d49c1677762891d43eab265dd35a6daca19.tar.zst
network-d5b30d49c1677762891d43eab265dd35a6daca19.zip
Use sing-box gVisor stack for routing instead of system, fixing VPN TCP
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'modules/vpn')
-rw-r--r--modules/vpn/ingress.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/vpn/ingress.nix b/modules/vpn/ingress.nix
index b05572e..6c6a78e 100644
--- a/modules/vpn/ingress.nix
+++ b/modules/vpn/ingress.nix
@@ -148,6 +148,7 @@ in
             interface_name = egressName;
             address = [ egressAddress ];
             mtu = egressMTU;
+            stack = "gvisor";
             auto_route = false; # we route manually
             strict_route = false;
             endpoint_independent_nat = true;
@@ -157,7 +158,6 @@ in
         outbounds = map (path: {
           type = "vless";
           flow = "xtls-rprx-vision";
-          packet_encoding = "xudp";
 
           server = egressHost path.egress;
           server_port = 443;