Dave Anderson

You had the name slightly off: https://github.com/bradfitz/art That's the data type used by *BSD's network stack iirc, and is very efficient at a bunch of things, much moreso than a...

Once minimized, the IPSet consists of only inclusive ranges, so the `without` part would never appear. Given that, a comma-separated list of IPRange's stringification seems like a fine string form....

This is pretty unfortunate. Lodged a complaint/plea at https://github.com/golang/go/issues/46731#issuecomment-1221008505 , as those annotations saved me multiple times from really hard to debug crashes and misbehaviors in this library. In theory,...

I was assuming 1 as our default. Concurrency safety is fantastic for consumers, so we should strive for it. I'm on the fence about 2, but as long as we...

General idea LGTM. Some concerns on the authn/authz side of things, which we didn't touch on previously. But first, here's some terminology I made up, because I kept confusing myself...

Modeled on `ipcalc` ? I could use an ipcalc that does IPv6.

There's no way in this API for me to deliver messages into the Conn, that's the main missing thing I think. When using a multiplexed socket, the natpmp package can...

Hm. I'm puzzled. I was _convinced_ that NAT-PMP and PCP both required the mapping request to come from the internal ip:port that the mapping should forward to. But looking again,...

So, it seems our prime question is whether zones ever make sense in a prefix, and we still don't know. The closest piece of software that might care is CoreRAD,...

Yeah, the resolution of this will be subsumed by what we decide our global behavior should be.