package app

const (
	trafficRulePrefMarkDirect        = 11500
	trafficRulePrefMarkIngressReply  = 11505
	trafficRulePrefMarkAppVPN        = 11510
	trafficRulePrefDirectSubnetStart = 11600
	trafficRulePrefDirectUIDStart    = 11680
	trafficRulePrefVPNSubnetStart    = 11720
	trafficRulePrefVPNUIDStart       = 11800
	trafficRulePrefFull              = 11900
	trafficRulePrefSelective         = 12000
	trafficRulePrefManagedMin        = 11500
	trafficRulePrefManagedMax        = 12099
	trafficRulePerKindLimit          = 70
	trafficAutoLocalDefault          = true
	trafficIngressReplyDefault       = false

	trafficIngressPreroutingChain = "prerouting_ingress_reply"
	trafficIngressOutputChain     = "output_ingress_reply"

	trafficIngressCaptureComment = "svpn_ingress_reply_capture"
	trafficIngressRestoreComment = "svpn_ingress_reply_restore"
)

const cgroupRootPath = "/sys/fs/cgroup"

// ---------------------------------------------------------------------
// traffic mode (selective / full_tunnel / direct)
// ---------------------------------------------------------------------
//
// EN: Controls route-policy behavior independently from DNS mode.
// EN: Uses a persisted desired state with runtime verification and rollback.
// RU: Управляет policy routing независимо от DNS-режима.
// RU: Использует сохраненное desired-state, runtime-проверку и откат.