Optimize wireguard kernel mode V2

[kunsonx]

基于 #2757 基础上 实现 outbound wireguard 非用户空间模式。

sys wireguard device + sysnetstack

requirements:

1. cap CAP_NET_ADMIN
2. ptables
3. net.ipv4.conf.all.src_valid_mark=1
4. modprobe wireguard
5. net.ipv6.conf.all.disable_ipv6 (启用 IPv6)

@yuhan6665 请检阅。

[yuhan6665]

回头我测一下 review 交给 @RPRX :)

[kunsonx]

好的，测完了跟我说下如何同步文档

[yuhan6665]

遇到一个问题 给客户端编译 gomobile 过不去

# gobind/gobind
/usr/local/go/pkg/tool/linux_amd64/link: running /home/yu/android-ndk-r23b/toolchains/llvm/prebuilt/linux-x86_64/bin/x86_64-linux-android21-clang failed: exit status 1
ld: error: unable to find library -lpthread
clang-12: error: linker command failed with exit code 1 (use -v to see invocation)

gomobile: go build -v -ldflags -s -w -buildmode=c-shared -o=/tmp/gomobile-work-2853750596/android/src/main/jniLibs/x86/libgojni.so ./gobind failed: exit status 1

https://github.com/2dust/AndroidLibXrayLite

[kunsonx]

@yuhan6665 请问有具体编译工程命令吗?

[yuhan6665]

@yuhan6665 请问有具体编译工程命令吗?

https://github.com/2dust/AndroidLibXrayLite
Readme

[kunsonx]

@yuhan6665 搞定。

[devopg]

@kunsonx
Hello. I see you are making a big update about WireGuard. I don't know if it's related to the #4025 (confuses certificates when opening multiple tabs) issue or not. The problem is being resolved right now. I just wanted to inform you so that you can take it into in your work, so that this issue doesn't come up again later.
Thank you for your work.