Cargo.toml

[workspace]

members = [
    "acl",
    "acl-filter",
    "args",
    "cli",
    "clock",
    "common",
    "concurrency",
    "concurrency-macros",
    "config",
    "dataplane",
    "dpdk",
    "dpdk-sys",
    "dpdk-sysroot-helper",
    "dpdk-test-macros",
    "errno",
    "fixed-size",
    "flow-entry",
    "flow-filter",
    "hardware",
    "id",
    "init",
    "interface-manager",
    "k8s-intf",
    "k8s-less",
    "left-right-tlcache",
    "lifecycle",
    "lookup",
    "lpm",
    "match-action",
    "match-action-derive",
    "mgmt",
    "n-it",
    "n-preinit",
    "n-vm",
    "n-vm-macros",
    "n-vm-protocol",
    "nat",
    "net",
    "pipeline",
    "rekon",
    "routing",
    "stats",
    "sysfs",
    "test-utils",
    "tracectl",
    "validator",
    "vpcmap",
]

resolver = "3"

[workspace.package]
version = "0.28.0"
edition = "2024"
license = "Apache-2.0"
publish = false
repository = "https://github.com/githedgehog/dataplane/"

[workspace.dependencies]

# NOTE: please do not enable features in this file.  Enable the specific features you need (and only those features) in
# the individual packages.  Enabling features here opts _everything_ into those features, which is actually quite
# problematic from the perspective of
#
# 1. correctly documenting what each package actually depends on,
# 2. allowing builds under different environments (e.g. cross-compilation, wasm, miri, and so on).
#
# Exceptions: see `tokio = { ..., features = ["parking_lot"] }` below.  Each exception has a comment
# justifying why it is workspace-wide.

# Internal
acl = { path = "./acl", package = "dataplane-acl", features = [] }
acl-filter = { path = "./acl-filter", package = "dataplane-acl-filter", features = [] }
args = { path = "./args", package = "dataplane-args", features = [] }
cli = { path = "./cli", package = "dataplane-cli", features = [] }
common = { path = "./common", package = "dataplane-common", features = [] }
clock = { path = "./clock", package = "dataplane-clock", features = [] }
concurrency = { path = "./concurrency", package = "dataplane-concurrency", features = [] }
concurrency-macros = { path = "./concurrency-macros", package = "dataplane-concurrency-macros", features = [] }
config = { path = "./config", package = "dataplane-config", features = [] }
dpdk = { path = "./dpdk", package = "dataplane-dpdk", features = [] }
dpdk-sys = { path = "./dpdk-sys", package = "dataplane-dpdk-sys", features = [] }
dpdk-sysroot-helper = { path = "./dpdk-sysroot-helper", package = "dataplane-dpdk-sysroot-helper", features = [] }
dpdk-test-macros = { path = "./dpdk-test-macros", package = "dataplane-dpdk-test-macros", features = [] }
dplane-rpc = { git = "https://github.com/githedgehog/dplane-rpc.git", branch = "pr/daniel-noland/bumps", features = [] }
errno = { path = "./errno", package = "dataplane-errno", features = [] }
fixed-size = { path = "./fixed-size", package = "dataplane-fixed-size", features = [] }
flow-entry = { path = "./flow-entry", package = "dataplane-flow-entry", features = [] }
flow-filter = { path = "./flow-filter", package = "dataplane-flow-filter", features = [] }
hardware = { path = "./hardware", package = "dataplane-hardware", features = [] }
id = { path = "./id", package = "dataplane-id", features = [] }
init = { path = "./init", package = "dataplane-init", features = [] }
interface-manager = { path = "./interface-manager", package = "dataplane-interface-manager", features = [] }
k8s-intf = { path = "./k8s-intf", package = "dataplane-k8s-intf", default-features = false, features = [] }
k8s-less = { path = "./k8s-less", package = "dataplane-k8s-less", features = [] }
left-right-tlcache = { path = "./left-right-tlcache", package = "dataplane-left-right-tlcache", features = [] }
lifecycle = { path = "./lifecycle", package = "dataplane-lifecycle", features = [] }
lookup = { path = "./lookup", package = "dataplane-lookup", features = [] }
lpm = { path = "./lpm", package = "dataplane-lpm", features = [] }
match-action = { path = "./match-action", package = "dataplane-match-action", features = [] }
match-action-derive = { path = "./match-action-derive", package = "dataplane-match-action-derive", features = [] }
mgmt = { path = "./mgmt", package = "dataplane-mgmt", features = [] }
n-it = { path = "./n-it", package = "dataplane-n-it", features = [] }
n-preinit = { path = "./n-preinit", package = "dataplane-n-preinit", features = [] }
n-vm = { path = "./n-vm", package = "dataplane-n-vm", features = [] }
n-vm-macros = { path = "./n-vm-macros", package = "dataplane-n-vm-macros", features = [] }
n-vm-protocol = { path = "./n-vm-protocol", package = "dataplane-n-vm-protocol", features = [] }
nat = { path = "./nat", package = "dataplane-nat", features = [] }
net = { path = "./net", package = "dataplane-net", features = [] }
pipeline = { path = "./pipeline", package = "dataplane-pipeline", features = [] }
rekon = { path = "./rekon", package = "dataplane-rekon", features = [] }
routing = { path = "./routing", package = "dataplane-routing", features = [] }
stats = { path = "./stats", package = "dataplane-stats", features = [] }
sysfs = { path = "./sysfs", package = "dataplane-sysfs", features = [] }
test-utils = { path = "./test-utils", package = "dataplane-test-utils", features = [] }
tracectl = { path = "./tracectl", package = "dataplane-tracectl", features = [] }
validator = { path = "./validator", package = "dataplane-validator", features = [] }
vpcmap = { path = "./vpcmap", package = "dataplane-vpcmap", features = [] }

# External
afpacket = { version = "0.2.3", default-features = false, features = [] }
ahash = { version = "0.8.12", default-features = false, features = [] }
anyhow = { version = "1.0.104", default-features = false, features = [] }
arc-swap = { version = "1.9.2", default-features = false, features = [] }
arrayvec = { version = "0.7.8", default-features = false, features = [] }
async-trait = { version = "0.1.92", default-features = false, features = [] }
atomic-instant-full = { version = "0.1.1", default-features = false, features = [] }
axum = { version = "0.8.9", default-features = false, features = [] }
axum-server = { version = "0.8.0", default-features = false, features = [] }
bindgen = { version = "0.73.2", default-features = false, features = [] }
bitflags = { version = "2.13.2", default-features = false, features = [] }
bnum = { version = "0.14.4", default-features = false, features = [] }
# The fork treats an unresolvable optional corpus as absent, allowing remapped
# and archived tests to run. Pin the revision so branch changes cannot alter it.
bolero = { git = "https://github.com/githedgehog/bolero.git", rev = "2fa595633a72e9b30721f9d37f0014a6ae8f77d4", default-features = false, features = [] }
bollard = { version = "0.20.2", default-features = false, features = [] }
bytecheck = { version = "0.8.3", default-features = false, features = [] }
bytes = { version = "1.12.1", default-features = false, features = [] }
caps = { version = "0.5.6", default-features = false, features = [] }
chrono = { version = "0.4.45", default-features = false, features = [] }
clap = { version = "4.6.7", default-features = true, features = [] }
cloud-hypervisor-client = { version = "0.3.3", default-features = false, features = [] }
color-eyre = { version = "0.6.5", default-features = false, features = [] }
colored = { version = "3.1.1", default-features = false, features = [] }
command-fds = { version = "0.3.2", default-features = false, features = [] }
criterion = { version = "0.8.2", default-features = false, features = [
  "cargo_bench_support",
  "html_reports",
  "plotters",
] }
iai-callgrind = { version = "0.16.1" }
crossbeam-utils = { version = "0.8.23", default-features = false, features = [] }
# shuttle-dashmap is dashmap itself unless its "shuttle" feature is on, in which case it swaps in a
# model-checkable RwLock<HashMap>.
dashmap = { version = "6.2.1", default-features = false, features = [] }
shuttle-dashmap = { version = "6.1.0", default-features = false, features = [] }
derive_builder = { version = "0.20.2", default-features = false, features = [] }
dotenvy = { version = "0.15.7", default-features = false, features = [] }
downcast-rs = { version = "2.0.2", default-features = false, features = [] }
doxygen-bindgen = { version = "0.1.4", default-features = false, features = [] }
dyn-iter = { version = "1.0.1", default-features = false, features = [] }
etherparse = { version = "0.21.0", default-features = false, features = [] }
fixin = { git = "https://github.com/githedgehog/fixin", branch = "main", features = [] }
futures = { version = "0.3.34", default-features = false, features = [] }
futures-util = { version = "0.3.34", default-features = false, features = [] }
hashbrown = { version = "0.17.1", default-features = false, features = [] }
hwlocality = { version = "1.0.0-alpha.12", default-features = false, features = [] }
hyper = { version = "1.11.1", default-features = false, features = [] }
hyper-util = { version = "0.1.20", default-features = false, features = [] }
indenter = { version = "0.3.4", default-features = false, features = [] }
inotify = { version = "0.11.5", default-features = false, features = [] }
ipnet = { version = "2.12.2", default-features = false, features = [] }
k8s-openapi = { version = "0.28.0", default-features = false, features = [] }
kanal = { version = "0.1.1", default-features = false, features = [] }
kube = { version = "4.2.0", default-features = false, features = [] }
kube-core = { version = "4.2.0", default-features = false, features = [] }
# The hh/shuttle fork makes WriteHandle::wait yield to Shuttle. Without it, the writer's
# sched_yield loop blocks the scheduler thread, preventing the reader from releasing its epoch.
left-right = { git = "https://github.com/githedgehog/left-right.git", branch = "hh/shuttle", default-features = false, features = [] }
libc = { version = "0.2.189", default-features = false, features = [] }
linkme = { version = "0.3.37", default-features = false, features = [] }
log = { version = "0.4.34", default-features = false, features = [] } # TODO: try to remove this
loom = { version = "0.7.2", default-features = false, features = [] }
memmap2 = { version = "0.9.11", default-features = false, features = [] }
metrics = { version = "0.24.6", default-features = false, features = [] }
metrics-exporter-prometheus = { version = "0.18.3", default-features = false, features = [] }
miette = { version = "7.6.0", default-features = false, features = [] }
mio = { version = "1.2.3", default-features = false, features = [] }
multi_index_map = { version = "0.15.1", default-features = false, features = [] }
netdev = { version = "0.46.3", default-features = false, features = [] }
netgauze-bgp-pkt = { version = "0.13.0", features = [] }
netgauze-bmp-pkt = { version = "0.13.0", features = [] }
nix = { version = "0.31.3", default-features = false, features = [] }
num-derive = { version = "0.5.1", default-features = false, features = [] }
num-traits = { version = "0.2.19", default-features = false, features = [] }
once_cell = { version = "1.21.4", default-features = false, features = [] }
ordermap = { version = "1.2.2", default-features = false, features = [] }
parking_lot = { version = "0.12.5", default-features = false, features = [] }
pci-ids = { version = "0.2.6", default-features = false, features = [] }
prefix-trie = { version = "0.10.1", default-features = false, features = [] }
pretty_assertions = { version = "1.4.1", default-features = false, features = [] }
priority-queue = { version = "2.7.0", default-features = false, features = [] }
proc-macro-crate = { version = "3.5.0", default-features = false, features = [] }
proc-macro2 = { version = "1.0.107", default-features = false, features = [] }
procfs = { version = "0.18.0", default-features = false, features = [] }
pyroscope = { version = "2.1.1", default-features = false, features = [] }
qapi-qmp = { version = "0.15.0", default-features = false, features = [] }
qapi-spec = { version = "0.3.2", default-features = false, features = [] }
quote = { version = "1.0.47", default-features = false, features = [] }
rand = { version = "0.10.3", default-features = false, features = [] }
rapidhash = { version = "4.5.1", default-features = false, features = [] }
reedline = { version = "0.51.0", default-features = false, features = [] }
regex = { version = "1.13.1", default-features = false, features = [] }
rkyv = { version = "0.8.18", default-features = false, features = [] }
roaring = { version = "0.11.5", default-features = false, features = [] }
rtnetlink = { git = "https://github.com/githedgehog/rtnetlink.git", branch = "hh/tc-actions4", default-features = false, features = [] }
rustls = { version = "0.23.45", default-features = false, features = [] }
schemars = { version = "1", default-features = false, features = [] }
serde = { version = "1.0.229", default-features = false, features = [] }
serde_json = { version = "1.0.151", default-features = false, features = [] }
serde_yaml_ng = { version = "0.10.0", default-features = false, features = [] }
serial_test = { version = "4.0.1", default-features = false, features = [] }
sha2 = { version = "0.11.0", default-features = false, features = [] }
shuttle = { version = "0.9.3", default-features = false, features = [] }
small-map = { version = "0.1.5", default-features = false, features = [] }
smallvec = { version = "1.15.2", default-features = false, features = [] }
static_assertions = { version = "1.1.0", default-features = false, features = [] }
strum = { version = "0.28.0", default-features = false, features = [] }
strum_macros = { version = "0.28.0", default-features = false, features = [] }
syn = { version = "3.0.6", default-features = false, features = [] }
thiserror = { version = "2.0.20", default-features = false, features = [] }
thread_local = { version = "1.1.10", default-features = false, features = [] }
# Exception to the "no workspace-wide features" rule above.  `tokio/parking_lot` is
# not an additive feature in the usual sense -- it picks the lock implementation
# tokio uses internally for its runtime.  Production builds already pull
# parking_lot in via `concurrency::sync`, so the only thing scoping this
# per-crate would buy is divergent runtime behaviour between test binaries
# and the real dataplane.  Keep it global.
tokio = { version = "1.53.1", default-features = false, features = ["parking_lot"] }
tokio-stream = { version = "0.1.18", default-features = false, features = [] }
tokio-util = { version = "0.7.19", default-features = false, features = [] }
tokio-vsock = { version = "0.7.2", default-features = false, features = [] }
tonic ={ version = "0.14.6", default-features = false, features = [] }
tracing = { version = "0.1.44", default-features = false, features = ["release_max_level_debug"] }
tracing-error = { version = "0.2.1", default-features = false, features = [] }
tracing-subscriber = { version = "0.3.23", default-features = false, features = [] }
tracing-test = { version = "0.2.6", default-features = false, features = [] }
trybuild = { version = "1.0.116", default-features = false, features = [] }
ureq = { version = "3.4.2", default-features = false, features = [] }
url = { version = "2.5.8", default-features = false, features = [] }
uuid = { version = "1.26.1", default-features = false, features = [] }
vsock = { version = "0.5.4", default-features = false, features = [] }

# NOTE: panic strategy is intentionally left unset here.
#
# Nix builds set panic=abort via RUSTFLAGS in `nix/profiles.nix` (`-Cpanic=abort`
# plus `-Zpanic_abort_tests`, the latter requiring RUSTC_BOOTSTRAP=1).
#
# We don't set `panic = "abort"` in these profiles because that would also
# apply to plain `cargo test`, where `-Zpanic_abort_tests` is unstable.
# Leaving panic unset keeps the cargo default (unwind) for local development,
# so `catch_unwind`/`#[should_panic]` work without nightly/RUSTC_BOOTSTRAP,
# while the shipped nix-built binaries still abort on panic.
[profile.dev]
debug-assertions = true
overflow-checks = true
debug = "full"
rpath = true

[profile.release]
opt-level = 3
debug = "full"
lto = "thin"
debug-assertions = false
overflow-checks = false
codegen-units = 1
rpath = true

# Build scripts and proc macros, which run on the host and are then thrown away.
#
# Cargo already spares them most of this profile: the emitted rustc line carries
# `-C embed-bitcode=no` and neither `-C opt-level` nor `-C codegen-units`, so they are built
# unoptimised, without LTO, and at the default codegen-unit count no matter what the profile
# above says. Debuginfo is the one setting they do inherit, and `-C debuginfo=2` on every build
# script and proc macro in the graph is object size and link time spent on code nobody will ever
# put a debugger on.
#
# `checked` inherits `release`, so the test profile picks this up too.
[profile.release.build-override]
debug = false

[profile.checked]
inherits = "release"
opt-level = 2
debug-assertions = true
overflow-checks = true
codegen-units = 8

# Some packages have either hardware or os level interactions which make them impossible to test on miri or use in wasm
# We encode exclusions for our wasm and miri builds into the metadata here.
# I have tried to divide the packages into miri/wasm enabled and disabled categories.
#
# hopeless + pointless: packages that are either hardware or os level interactions and are impossible to test on miri or
#                       use in wasm.  These aren't just "fail to compile in this environment" - they are actually
#                       impossible to compile or use in wasm/miri.  Even if you could somehow compile them, they simply
#                       don't make any sense to use in wasm/miri.
# split: crates which are at least potentially useful in wasm/miri, but which also contain hardware or os level
#        interactions which are impossible or nonsensical in wasm/miri.  These crates would need to be split or
#        modified to use conditional compilation to work in wasm/miri.
# miss: packages that are not logically hopeless, or pointless in wasm/miri, but which currently just happen to contain
#       logic which can and should eventually be factored out or abstracted into something suitable for wasm/miri.
[workspace.metadata.package.acl]
package = "dataplane-acl"
# Default features enable the DPDK `rte_acl` backend, which pulls in
# `dpdk-sys` (bindgen against the system DPDK headers).  miri can't
# build that path on the cross target, and the reference backend's
# unit tests run fine outside the miri profile.
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.acl-filter]
package = "dataplane-acl-filter"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.args]
package = "dataplane-args"
miri = true
wasm = false # miss

[workspace.metadata.package.cli]
package = "dataplane-cli"
miri = true
wasm = false # split

[workspace.metadata.package.concurrency]
package = "dataplane-concurrency"
miri = true # must ALWAYS work
# NOTE: concurrency should likely be dependency gated as `cfg(unix)` or `cfg(not(target_arch = "wasm32"))`
wasm = false # hopeless + pointless

[workspace.metadata.package.concurrency-macros]
package = "dataplane-concurrency-macros"
# Proc-macro crate: runs at the host toolchain, not the miri target.
# Excluded from miri to keep the target dep graph clean.  Without this,
# `cargo miri nextest` builds the host test binary and then tries to run
# it through the cargo-miri runner, which fails with a misleading
# "outdated or invalid JSON; try `cargo clean`".
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.dataplane]
package = "dataplane"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.dpdk]
package = "dataplane-dpdk"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.dpdk-sys]
package = "dataplane-dpdk-sys"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.dpdk-test-macros]
package = "dataplane-dpdk-test-macros"
# Proc-macro crate: runs at the host toolchain, not the miri target.
# Excluded from miri to keep the target dep graph clean.  Without this,
# `cargo miri nextest` builds the host test binary and then tries to run
# it through the cargo-miri runner, which fails with a misleading
# "outdated or invalid JSON; try `cargo clean`".
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.fixed-size]
package = "dataplane-fixed-size"
miri = true
wasm = true

[workspace.metadata.package.flow-entry]
package = "dataplane-flow-entry"
miri = true
wasm = false # miss

[workspace.metadata.package.flow-filter]
package = "dataplane-flow-filter"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.hardware]
package = "dataplane-hardware"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.init]
package = "dataplane-init"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.interface-manager]
package = "dataplane-interface-manager"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.k8s-intf]
package = "dataplane-k8s-intf"
miri = true
wasm = false # split

[workspace.metadata.package.k8s-less]
package = "dataplane-k8s-less"
miri = true
wasm = false # split

[workspace.metadata.package.lookup]
package = "dataplane-lookup"
miri = true
wasm = false # split (std collections)

[workspace.metadata.package.match-action]
package = "dataplane-match-action"
miri = true
wasm = true

[workspace.metadata.package.match-action-derive]
package = "dataplane-match-action-derive"
# Proc-macro crate: runs at the host toolchain, not the miri target.
# Excluded from miri to keep the target dep graph clean.
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.mgmt]
package = "dataplane-mgmt"
miri = false
wasm = false # split

[workspace.metadata.package.nat]
package = "dataplane-nat"
miri = true
wasm = false # split

[workspace.metadata.package.n-it]
package = "dataplane-n-it"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.n-preinit]
package = "dataplane-n-preinit"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.n-vm]
package = "dataplane-n-vm"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.n-vm-macros]
package = "dataplane-n-vm-macros"
# Proc-macro crate: runs at the host toolchain, not the miri target.
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.n-vm-protocol]
package = "dataplane-n-vm-protocol"
# Pure wire types, so miri has something to say about them; it is the crates that
# drive guests that it cannot follow.
miri = true
wasm = false # hopeless + pointless

[workspace.metadata.package.pipeline]
package = "dataplane-pipeline"
miri = true
wasm = false # miss

[workspace.metadata.package.routing]
package = "dataplane-routing"
miri = true
wasm = false # split

[workspace.metadata.package.stats]
package = "dataplane-stats"
miri = true
wasm = false # miss

[workspace.metadata.package.sysfs]
package = "dataplane-sysfs"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.test-utils]
package = "dataplane-test-utils"
miri = true
wasm = false # hopeless + pointless

[workspace.metadata.package.tracectl]
package = "dataplane-tracectl"
miri = false # hopeless + pointless
wasm = false # hopeless + pointless

[workspace.metadata.package.vpcmap]
package = "dataplane-vpcmap"
miri = true
wasm = false # miss