Skip to content

[DO NOT MERGE] RCA of neptun data usage spike#65

Draft
Jauler wants to merge 4 commits intomainfrom
RCA-neptun-data-usage-spike
Draft

[DO NOT MERGE] RCA of neptun data usage spike#65
Jauler wants to merge 4 commits intomainfrom
RCA-neptun-data-usage-spike

Conversation

@Jauler
Copy link
Contributor

@Jauler Jauler commented Mar 3, 2026

We have reports, and a few reproductions of NordVPN app using a large amount of data in a relatively short amount of period. This happens very rarely (we have two reproductions in total as of now).

In order to help identify the source of the traffic, this PR adds a bit of information collection, by looking at what IPs are involved flowing through the NepTUN and what SNI headers.

THIS IS INTENDED ONLY FOR DEBUGGING PURPOSES ONLY AND MUST NOT BE MERGED!

@Jauler Jauler force-pushed the RCA-neptun-data-usage-spike branch from a00bd1f to f438b65 Compare March 3, 2026 10:48
@codecov
Copy link

codecov bot commented Mar 3, 2026

Codecov Report

❌ Patch coverage is 5.46218% with 225 lines in your changes missing coverage. Please review.
✅ Project coverage is 44.50%. Comparing base (41c6bfc) to head (27ae710).
⚠️ Report is 6 commits behind head on main.

Files with missing lines Patch % Lines
neptun/src/device/mod.rs 0.00% 178 Missing ⚠️
neptun/src/noise/mod.rs 24.07% 41 Missing ⚠️
neptun/src/noise/timers.rs 0.00% 6 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main      #65      +/-   ##
==========================================
- Coverage   46.56%   44.50%   -2.06%     
==========================================
  Files          15       15              
  Lines        4310     4525     +215     
==========================================
+ Hits         2007     2014       +7     
- Misses       2303     2511     +208     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Jauler added 2 commits March 3, 2026 12:55
We have observed that rarely we see high-traffic usage spikes. At this
moment the origin of this spikes is unknown hence, a local reproduction
will be attempted with additional info collection enabled. This commit
enables that and starts collecting info on per-five-tuple data usage
@Jauler Jauler force-pushed the RCA-neptun-data-usage-spike branch from f438b65 to 31b1f45 Compare March 3, 2026 11:05
@Jauler Jauler marked this pull request as draft March 3, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant