Comments (16)
from lokinet.
While I definitely want IPv6 support for exits, I'm unsure how to feel about IPv6-only. Some of things are still IPv4-only :\
You probably want to give globally routable IPv6 address (based on client' public key) to interface.
Should we support NPTv6 use case too? Unsure if having constant ULA NPTv6 address or changing-when-exit-changes globally routable IPv6 would be better..
- there aren't any good deprecated or unused private ipv6 ranges left that I can use that I know of.
could use some /48 or /64 subnet of fd00::/8 but yeah that's sorta ugly
- ipv4 only exits would be NAT'd HELL on earth.
end2end connectivity and possibility to host services would be sorta cool but unsure if it's critical use case
- would provide a clear separation between hidden service and exit traffic
imo could be separated by using packet destination address; we'd still use source address of zeros, and leave OS to handle NAT. less clear but not something impossibly confusing.
from lokinet.
from lokinet.
based on client' public key
nvm that's really bad idea for fingerprintability (and also exits would need to keep state of peers either way so not much would be gained with that).
from lokinet.
that means we would probably use SIIT with NAT if we do any ipv4 exit traffic.
SIIT sounds like more work to do, and also has some edges like MTU being different for IPv4 and IPv6 (how the hell would his handled for tun interfaces? multiple of them?)
from lokinet.
from lokinet.
for MTU we'll probably pick the smallest initially.
I don't like that.
it could be negotiated with the exit.
more work to do.
Is there anything really wrong with using same kind of IPv4 packets for exit traffic, other than "stuffing everything to IPv6 for that looks cleaner to me"?
from lokinet.
from lokinet.
https://tools.ietf.org/html/rfc7915 (SIIT) seems like quite hell of work to do (and I don't want llarp to do this kind of work as it'll be possible bug source and even implemented properly still has some very undesirable properties like requiring lower MTU, handling of fragmentation), so I'd rather not have IPv4 support initially than have it implemented this way.
from lokinet.
from lokinet.
Well, my current proposal for IPv4 exit traffic would be packets with client' src address set to 0.0.0.0
and dst address to globally routable (not in 0.0.0.0/8) IPv4 address.
Older clients have both src and dst addresses non-0.
Newer clients have both src and dst addresses 0.
Other IPv4 addresses from 0.0.0.0/8 range could be used for future extensions.
from lokinet.
Older clients have both src and dst addresses non-0.
Newer clients have both src and dst addresses 0.
clarification: for hidden service to hidden service traffic
for clearnet->client, src would be globaly routable IPv4 address, dst would be 0.0.0.0
from lokinet.
internally everything is represented as ipv6 anyways, including ipv4 addresses as hybrid dualstack addresses (::ffff:8.8.8.8)
no blockers on my end, i already require some inet6 driver installed on the host system just to read out RCs
tcpip6.sys
in v5- integrated into plain old
tcpip.sys
elsewhere
from lokinet.
i have implemented part of this in my ipv6-tun branch
from lokinet.
priv
it's possible that https://github.com/onioncat/onioncat/blob/master/glob_id.txt are not used at all.
At least i cannot connect to any of the ipv6 tor/i2p that are known.
from lokinet.
closing since we have ipv6 code now
from lokinet.
Related Issues (20)
- Explore WebTransport capable wire protocol.
- [discussion] Research Equi-x for DDoS protection HOT 1
- # Monetizing Lokinet: Integrating Payment, Per Order Token Burning, and Authorization into the Exit Marketplace HOT 2
- cannot set interface name: Operation not permitted HOT 5
- failed to connect to lokinet RPC: connection attempt timed out HOT 1
- Lokinet JavaScript Error HOT 4
- old version when downloading from the site HOT 2
- Incompatibility with UVW 3.0.0? error: 'AsyncHandle' is not a member of 'uvw'; did you mean 'async_handle'? etc. HOT 9
- Build error with recent ngtcp2 HOT 4
- Nixos: Unable to use lokinet HOT 2
- out of date static dep HOT 2
- Doesn't connect to the internet HOT 38
- Fedora(38) / RPM Support
- Build on FreeBSD 13.2-RELEASE-p4 fails with zlib 1.2.13 404 not found and undefined symbol: llarp::sys::service_manager after zlib url fix
- end of development? HOT 5
- Update it to Ubuntu Mantic Minotaur
- Tgiiiu
- Question regarding message holding and swarms HOT 1
- trojan dont download HOT 4
- NET HELPMSG 3534
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lokinet.