go.mod: update gvisor-tap-vsock to v0.8.8 and improve port driver benchmarks

Signed-off-by: fahed dorgaa <[email protected]>

Author: fahedouch

docs/port.md

@@ -6,10 +6,9 @@ The default value is `none` (do not expose ports).
 
 | `--port-driver`      |  Throughput | Source IP | Notes
 |----------------------|-------------|----------|-------
-| `slirp4netns`        | 2.51 Gbps   | Propagated | 
-| `socat` (Deprecated) | 7.80 Gbps   | Always 127.0.0.1 | 
-| `builtin`            | 32.6 Gbps   | Always 127.0.0.1 | 
-| `gvisor-tap-vsock` (Experimental) | 2.26 Gbps | Propagated | Throughput is currently limited; see issue link below for improvement ideas.
+| `slirp4netns`        | 9.78 Gbps   | Propagated | 
+| `builtin`            | 35.6 Gbps   | Always 127.0.0.1 | 
+| `gvisor-tap-vsock` (Experimental) | 3.99 Gbps | Propagated | Throughput is currently limited; see issue link below for improvement ideas.
 
 ([Benchmark: iperf3 from the parent to the child (Mar 8, 2020)](https://github.com/rootless-containers/rootlesskit/runs/492498728))
 
@@ -37,11 +36,6 @@ rootlesskit$ rootlessctl --socket=/run/user/1001/rootlesskit/foo/api.sock remove
 1
 ```
 
-You can also expose ports using `socat` and `nsenter` instead of RootlessKit's port drivers.
-```console
-$ pid=$(cat /run/user/1001/rootlesskit/foo/child_pid)
-$ socat -t -- TCP-LISTEN:8080,reuseaddr,fork EXEC:"nsenter -U -n -t $pid socat -t -- STDIN TCP4\:127.0.0.1\:80"
-```
 
 ### Exposing privileged ports
 To expose privileged ports (< 1024), add `net.ipv4.ip_unprivileged_port_start=0` to `/etc/sysctl.conf` (or `/etc/sysctl.d`) and run `sudo sysctl --system`.

go.mod

@@ -5,7 +5,7 @@ go 1.24.0
 require (
 	github.com/Masterminds/semver/v3 v3.4.0
 	github.com/containernetworking/plugins v1.7.1
-	github.com/containers/gvisor-tap-vsock v0.8.7
+	github.com/containers/gvisor-tap-vsock v0.8.8-0.20250909141233-c4615cdb1462
 	github.com/gofrs/flock v0.12.1
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/mux v1.8.1
@@ -40,6 +40,3 @@ require (
 	golang.org/x/tools v0.36.0 // indirect
 	gvisor.dev/gvisor v0.0.0-20240916094835-a174eb65023f // indirect
 )
-
-// Point to upstream main until the next release to get this fix: https://github.com/containers/gvisor-tap-vsock/commit/c4615cdb1462cb4c9ea5ab770ea11ad03c472c26
-replace github.com/containers/gvisor-tap-vsock => github.com/containers/gvisor-tap-vsock v0.8.8-0.20250909141233-c4615cdb1462