feat: add promiscuous mode and spoofing config

app/tun/config.proto

@@ -22,4 +22,6 @@ message Config {
     v2ray.core.net.packetaddr.PacketAddrType packet_encoding = 4;
     string tag = 6;
     repeated v2ray.core.app.router.routercommon.CIDR ips = 7;
+    bool enable_promiscuous_mode = 8;
+    bool enable_spoofing = 9;
 }

app/tun/nic.go

@@ -8,9 +8,9 @@ import (
 	"gvisor.dev/gvisor/pkg/tcpip/stack"
 )
 
-func CreateNIC(nicID tcpip.NICID, linkEndpoint stack.LinkEndpoint) StackOption {
+func CreateNIC(id tcpip.NICID, linkEndpoint stack.LinkEndpoint) StackOption {
 	return func(s *stack.Stack) error {
-		if err := s.CreateNICWithOptions(nicID, linkEndpoint,
+		if err := s.CreateNICWithOptions(id, linkEndpoint,
 			stack.NICOptions{
 				Disabled: false,
 				QDisc:    nil,
@@ -21,6 +21,24 @@ func CreateNIC(nicID tcpip.NICID, linkEndpoint stack.LinkEndpoint) StackOption {
 	}
 }
 
+func SetPromiscuousMode(id tcpip.NICID, enable bool) StackOption {
+	return func(s *stack.Stack) error {
+		if err := s.SetPromiscuousMode(id, enable); err != nil {
+			return newError("failed to set promiscuous mode:", err)
+		}
+		return nil
+	}
+}
+
+func SetSpoofing(id tcpip.NICID, enable bool) StackOption {
+	return func(s *stack.Stack) error {
+		if err := s.SetSpoofing(id, enable); err != nil {
+			return newError("failed to set spoofing:", err)
+		}
+		return nil
+	}
+}
+
 func AddProtocolAddress(id tcpip.NICID, ips []*routercommon.CIDR) StackOption {
 	return func(s *stack.Stack) error {
 		for _, ip := range ips {

app/tun/stack.go

@@ -34,6 +34,7 @@ func (t *TUN) CreateStack(linkedEndpoint stack.LinkEndpoint) (*stack.Stack, erro
 
 		CreateNIC(nicID, linkedEndpoint),
 		AddProtocolAddress(nicID, t.config.Ips),
+		SetPromiscuousMode(nicID, t.config.EnablePromiscuousMode),
 	}
 
 	for _, opt := range opts {