Rewrite from TypeScript to Go (#211)

Replace TypeScript implementation (rathole + traefik) with a single
Go binary using native QUIC tunneling. Zero external runtime dependencies.

Author: firecow

.dockerignore

@@ -1 +1,3 @@
-/src/managers/*.toml
+.git
+.github
+*.md

.github/workflows/quality-assurance.yml

@@ -1,45 +1,38 @@
----
 name: Quality Assurance
 
 on:
   push:
-    branches: ["main"]
+    branches: [main]
   pull_request:
-    branches: ["main"]
+    branches: [main]
 
 jobs:
-
-  docker-buildx:
-    runs-on: ubuntu-latest
+  lint:
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
-        id: buildx
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
         with:
-          install: true
-      - run: docker buildx build --platform linux/amd64 . -t firecow/ratnation --cache-to type=gha --cache-from type=gha,mode=max
+          go-version: "1.23"
+      - uses: golangci/golangci-lint-action@v6
+        with:
+          version: v1.64.5
 
-  eslint:
-    runs-on: ubuntu-latest
+  test:
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
         with:
-          node-version: 22
-          cache: 'npm'
-      - run: npm ci --no-audit
-      - run: npx eslint .
+          go-version: "1.23"
+      - run: go test -race ./...
 
-  jest:
-    runs-on: ubuntu-latest
+  docker:
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/build-push-action@v6
         with:
-          node-version: 22
-          cache: 'npm'
-      - run: npm ci --no-audit
-      - run: npm run build
-      - run: npm test
-      - run: node src/index.js --help
+          context: .
+          push: false

.gitignore

@@ -1,9 +1,2 @@
-/.cego/
-/.idea/
-/.gitlab-ci-local/
-/coverage/
-/node_modules/
-/src/king/*.toml
-/src/ling/*.toml
-**/*.mjs
-**/*.js
+/burrow
+*.exe

.golangci.yml

@@ -0,0 +1,43 @@
+linters:
+  enable:
+    - bodyclose
+    - copyloopvar
+    - errcheck
+    - errorlint
+    - gocognit
+    - gocritic
+    - gofmt
+    - gosec
+    - govet
+    - ineffassign
+    - misspell
+    - nilerr
+    - prealloc
+    - revive
+    - staticcheck
+    - unconvert
+    - unparam
+    - unused
+    - wastedassign
+
+linters-settings:
+  gocognit:
+    min-complexity: 30
+  revive:
+    rules:
+      - name: blank-imports
+      - name: context-as-argument
+      - name: dot-imports
+      - name: error-return
+      - name: error-strings
+      - name: exported
+        disabled: true
+      - name: increment-decrement
+      - name: indent-error-flow
+      - name: range
+      - name: receiver-naming
+      - name: redefines-builtin-id
+      - name: time-naming
+      - name: unexported-return
+      - name: var-declaration
+      - name: var-naming

Dockerfile

@@ -1,18 +1,17 @@
-FROM traefik:v3.5.0 AS traefik
+FROM golang:1.24.4-alpine AS builder
 
-FROM alpine:3.22.1 AS rathole
-RUN wget -O rathole.zip https://github.com/rapiz1/rathole/releases/download/v0.4.8/rathole-x86_64-unknown-linux-musl.zip && unzip rathole.zip
+WORKDIR /build
 
-FROM alpine:3.22.1 AS node_modules
-RUN apk add nodejs npm
-COPY package.json package-lock.json ./
-RUN npm install --no-audit --no-progress --omit=dev
+COPY go.mod go.sum ./
+RUN go mod download
 
-FROM alpine:3.22.1
-RUN apk add nodejs npm
-COPY --from=node_modules /node_modules /node_modules
-COPY --from=traefik /usr/local/bin/traefik /usr/local/bin/traefik
-COPY --from=rathole /rathole /usr/local/bin/rathole
-COPY package.json ./
-COPY src src
-ENTRYPOINT ["node", "src/index.js"]
+COPY . .
+RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o burrow ./cmd/burrow
+
+FROM alpine:3.21.3
+
+RUN apk add --no-cache ca-certificates
+
+COPY --from=builder /build/burrow /usr/local/bin/burrow
+
+ENTRYPOINT ["burrow"]

cmd/burrow/main.go

@@ -0,0 +1,43 @@
+package main
+
+import (
+	"context"
+	"log/slog"
+	"os"
+	"os/signal"
+	"syscall"
+
+	"github.com/firecow/ratnation/internal/council"
+	"github.com/firecow/ratnation/internal/debug"
+	"github.com/firecow/ratnation/internal/king"
+	"github.com/firecow/ratnation/internal/ling"
+	"github.com/spf13/cobra"
+)
+
+func main() {
+	os.Exit(run())
+}
+
+func run() int {
+	slog.SetDefault(slog.New(slog.NewJSONHandler(os.Stdout, nil)))
+
+	ctx, cancel := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM)
+	defer cancel()
+
+	root := &cobra.Command{
+		Use:   "burrow",
+		Short: "Distributed service mesh with native QUIC tunneling",
+	}
+
+	root.AddCommand(council.Command())
+	root.AddCommand(king.Command())
+	root.AddCommand(ling.Command())
+	root.AddCommand(debug.Command())
+
+	root.SetContext(ctx)
+
+	if err := root.ExecuteContext(ctx); err != nil {
+		return 1
+	}
+	return 0
+}

example_deploy.sh

@@ -11,14 +11,14 @@ networks:
     attachable: true
 
 services:
-  ratcouncil:
+  council:
     image: firecow/ratnation:${DOCKER_TAG:-latest}
     networks: [host]
     command: council --port 8080
     ports:
       - { target: 8080, published: 8080, protocol: tcp, mode: host }
 
-  ratking1:
+  king1:
     image: firecow/ratnation:${DOCKER_TAG:-latest}
     networks: [host]
     command:
@@ -28,11 +28,11 @@ services:
       --rathole="bind_port=2333 ports=5000-5001"
       --location=CPH
     ports:
-      - { target: 2333, published: 2333, protocol: tcp, mode: host }
+      - { target: 2333, published: 2333, protocol: udp, mode: host }
       - { target: 5000, published: 5000, protocol: tcp, mode: host }
       - { target: 5001, published: 5001, protocol: tcp, mode: host }
 
-  ratking2:
+  king2:
     image: firecow/ratnation:${DOCKER_TAG:-latest}
     networks: [host]
     command:
@@ -43,14 +43,14 @@ services:
       --rathole="bind_port=2335 ports=5004-5004"
       --location=AMS
     ports:
-      - { target: 2334, published: 2334, protocol: tcp, mode: host }
-      - { target: 2335, published: 2335, protocol: tcp, mode: host }
+      - { target: 2334, published: 2334, protocol: udp, mode: host }
+      - { target: 2335, published: 2335, protocol: udp, mode: host }
       - { target: 5002, published: 5002, protocol: tcp, mode: host }
       - { target: 5003, published: 5003, protocol: tcp, mode: host }
       - { target: 5004, published: 5004, protocol: tcp, mode: host }
 
-  # <editor-fold desc="Alpha services">
-  ratling-alpha:
+  # Alpha services
+  ling-alpha:
     image: firecow/ratnation:${DOCKER_TAG:-latest}
     networks: [alpha]
     command:
@@ -60,24 +60,22 @@ services:
     deploy: { update_config: { order: start-first, parallelism: 0 } }
   echoserver-alpha:
     hostname: echoserver-alpha
-    image: jmalloc/echo-server
+    image: jmalloc/echo-server:0.3.6
     networks: [alpha]
     deploy: { update_config: { order: start-first, parallelism: 0 } }
-  # </editor-fold>
 
-  # <editor-fold desc="Beta services">
-  ratling-beta:
+  # Beta services
+  ling-beta:
     image: firecow/ratnation:${DOCKER_TAG:-latest}
     networks: [beta]
     command:
       ling
       --council-host="http://172.17.0.1:8080"
       --proxy="name=alpha bind_port=2184"
     deploy: { update_config: { order: start-first, parallelism: 0 } }
-  # This requester service should be able to reach echoserver-alpha through the ratling-beta on port 2184
+  # This requester service should be able to reach echoserver-alpha through ling-beta on port 2184
   debug-requester-beta:
     image: firecow/ratnation:${DOCKER_TAG:-latest}
-    command: ["debug-requester", "--url=http://ratling-beta:2184"]
+    command: ["debug-requester", "--url=http://ling-beta:2184"]
     networks: [beta]
     deploy: { update_config: { order: start-first, parallelism: 0 } }
-  # </editor-fold>

examples/docker-swarm/stack.yml

@@ -0,0 +1,79 @@
+module github.com/firecow/ratnation
+
+go 1.24.0
+
+require (
+	github.com/coder/websocket v1.8.14
+	github.com/google/uuid v1.6.0
+	github.com/quic-go/quic-go v0.49.0
+	github.com/spf13/cobra v1.8.1
+	github.com/stretchr/testify v1.11.1
+	github.com/testcontainers/testcontainers-go v0.40.0
+)
+
+require (
+	dario.cat/mergo v1.0.2 // indirect
+	github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
+	github.com/Microsoft/go-winio v0.6.2 // indirect
+	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
+	github.com/containerd/errdefs v1.0.0 // indirect
+	github.com/containerd/errdefs/pkg v0.3.0 // indirect
+	github.com/containerd/log v0.1.0 // indirect
+	github.com/containerd/platforms v0.2.1 // indirect
+	github.com/cpuguy83/dockercfg v0.3.2 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/distribution/reference v0.6.0 // indirect
+	github.com/docker/docker v28.5.1+incompatible // indirect
+	github.com/docker/go-connections v0.6.0 // indirect
+	github.com/docker/go-units v0.5.0 // indirect
+	github.com/ebitengine/purego v0.8.4 // indirect
+	github.com/felixge/httpsnoop v1.0.4 // indirect
+	github.com/go-logr/logr v1.4.3 // indirect
+	github.com/go-logr/stdr v1.2.2 // indirect
+	github.com/go-ole/go-ole v1.2.6 // indirect
+	github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
+	github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/klauspost/compress v1.18.0 // indirect
+	github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
+	github.com/magiconair/properties v1.8.10 // indirect
+	github.com/moby/docker-image-spec v1.3.1 // indirect
+	github.com/moby/go-archive v0.1.0 // indirect
+	github.com/moby/patternmatcher v0.6.0 // indirect
+	github.com/moby/sys/sequential v0.6.0 // indirect
+	github.com/moby/sys/user v0.4.0 // indirect
+	github.com/moby/sys/userns v0.1.0 // indirect
+	github.com/moby/term v0.5.0 // indirect
+	github.com/morikuni/aec v1.0.0 // indirect
+	github.com/onsi/ginkgo/v2 v2.9.5 // indirect
+	github.com/opencontainers/go-digest v1.0.0 // indirect
+	github.com/opencontainers/image-spec v1.1.1 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
+	github.com/shirou/gopsutil/v4 v4.25.6 // indirect
+	github.com/sirupsen/logrus v1.9.3 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/tklauser/go-sysconf v0.3.12 // indirect
+	github.com/tklauser/numcpus v0.6.1 // indirect
+	github.com/yusufpapurcu/wmi v1.2.4 // indirect
+	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect
+	go.opentelemetry.io/otel v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect
+	go.opentelemetry.io/otel/metric v1.40.0 // indirect
+	go.opentelemetry.io/otel/sdk v1.40.0 // indirect
+	go.opentelemetry.io/otel/trace v1.40.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
+	go.uber.org/mock v0.5.0 // indirect
+	golang.org/x/crypto v0.43.0 // indirect
+	golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 // indirect
+	golang.org/x/mod v0.18.0 // indirect
+	golang.org/x/net v0.45.0 // indirect
+	golang.org/x/sync v0.8.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/tools v0.22.0 // indirect
+	google.golang.org/protobuf v1.36.11 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+)