spry-turn 0.2.1 — standalone performance qualification

Standalone Rust STUN/TURN, MIT / TheCryptoDonkey / ForgeSworn. This prerelease adds measured TCP/TLS readiness tuning and broader qualification. Shipping runtime dependencies and public configuration are unchanged.

• Full native M4 matrix: UDP delivery 16–22% above the tested coturn configuration and TLS 27–35% above; TCP ranges from 1.2% behind to 8.5% ahead. Linux VM results are mixed, including UDP regressions. These are disclosed loopback workloads, not maximum WAN capacity.
• 216 complete M4/Linux matrix runs and 96,423,584 checked forwarded packets. Raw data, resource counters, unsuccessful burst trials and separate batching/process/PGO experiments are retained.
• 32 socket/fixture tests on macOS and Linux, real TCP backpressure recovery, 180-second churn with 30,137 allocations, and 15.2 million ASan/libFuzzer inputs without crashes.
• Actual KithMoot web source 24038110 passed UDP/TCP/TLS generated decoded media against the exact macOS release binary. Owner credentials are entered through device Settings; zero credential-service requests.
• WASM integrity/arena execution passed one million reuse operations without linear-memory growth.

Downloads: macOS ARM64 and GNU/Linux ARM64 TLS-enabled standalone executables, plus WASM/ESM/TypeScript codec bindings. Verify SHA256SUMS; BUILD.json and release-manifest.json identify source and each payload. Linux was tested with Debian glibc 2.36 and needs glibc/libgcc. The WASM codec cannot host a raw-socket server in a browser.

Getting started · Measurements and limits · KithMoot acceptance · Support and donations · LLM index

Cross-network operation, physical GrapheneOS calls, trusted public certificate renewal and Archy installation remain separate gates. Full coturn parity is not claimed. This release deploys no relay or credential service; the existing private coturn instance is unchanged. Package registries, container images and Pages remain outside this release.