28 Jul 2021 |
[Jonathan] | Yeup, that too | 20:57:02 |
Github [@neilalexander:matrix.org] | [yggdrasil-network/yggdrasil-go] neilalexander opened pull request #822: TLS Server Name Indication [open] - https://github.com/yggdrasil-network/yggdrasil-go/pull/822 | 21:25:00 |
Github [@neilalexander:matrix.org] | [yggdrasil-network/yggdrasil-go] neilalexander edited pull request #822: TLS Server Name Indication [open] - https://github.com/yggdrasil-network/yggdrasil-go/pull/822 | 21:25:07 |
neilalexander | In reply to @adb:mozilla.org I am at your disposal to try that https://github.com/yggdrasil-network/yggdrasil-go/pull/822 — Here's a branch that you can try | 21:25:24 |
neilalexander | It'll set the SNI automatically if the peering URI contains a hostname, but you can also override it by doing tls://a.b.c.d:e?sni=google.com or similar | 21:25:52 |
neilalexander | (Since Yggdrasil doesn't care what the SNI is on the receiving end, you could set it to anything I guess, which might fool some naive filters) | 21:26:19 |
Oleg Girko | In reply to @Arceliar:matrix.org (you probably shouldn't host services on a 300::/8 address, the prefixes were added wit the intent that non-ygg devices could use them to make outbound connections) This idea of /64 subnet looks fishy to me. Too easy to spoof 48 bits.
Another idea to consider would be using stateful DHCPv6 on a LAN instead of SLAAC. This way proper public keys can be generated on a server when a client requests IPv6 address, so hosts on LAN will have addresses generated the same way as full nodes, but their keys will be located on a full node. From Yggdrasil point of view, these LAN hosts will look like normal nodes connrcted through a real node that has their keys.
| 21:36:58 |
Arceliar | maybe. the /64 was mostly a hack to make it so i could advertise ygg access to my windows PC and my phone, before ygg had been ported to platforms other than linux | 21:38:24 |
adb | In reply to @neilalexander:matrix.org https://github.com/yggdrasil-network/yggdrasil-go/pull/822 — Here's a branch that you can try yikes! yggdrasil requires go 1.16 or later and what I have is 1.15.6 (and I only have mobile data, can't download it right now) | 21:39:49 |
neilalexander | In reply to @adb:mozilla.org yikes! yggdrasil requires go 1.16 or later and what I have is 1.15.6 (and I only have mobile data, can't download it right now) Which OS/architecture are you on? | 21:40:22 |
adb | In reply to @neilalexander:matrix.org Which OS/architecture are you on? GNU/Linux | 21:40:33 |
neilalexander | Debian or other? | 21:40:49 |
adb | Kubuntu | 21:40:54 |
neilalexander | So you installed using the .deb ? | 21:41:03 |
adb | In reply to @neilalexander:matrix.org So you installed using the .deb ? I don't had it in the pc at all | 21:41:19 |
adb | was using it in the phone (my only connection medium is a phone) | 21:41:38 |
neilalexander | ah, I was going to say you could try this .deb file or this Linux binary (both amd64) | 21:42:12 |
adb | * I didn't have it in the pc at all | 21:42:18 |
neilalexander | They are both the SNI build from CI | 21:42:19 |
adb | just realized my go version in Termux is 1.16.5, will try to compile the branch in my phone | 21:44:54 |
Github [@neilalexander:matrix.org] | [yggdrasil-network/yggdrasil-go] neilalexander ready_for_review pull request #822: TLS Server Name Indication [open] - https://github.com/yggdrasil-network/yggdrasil-go/pull/822 | 21:47:30 |
Github [@neilalexander:matrix.org] | [yggdrasil-network/yggdrasil-go] neilalexander review_requested pull request #822: TLS Server Name Indication [open] - https://github.com/yggdrasil-network/yggdrasil-go/pull/822 | 21:47:34 |
Arceliar | if that doesn't work, it probably shouldn't be too difficult to throw together quic:// support. or maybe utp:// (with TLS) | 21:49:29 |
neilalexander | Yeah indeed | 21:50:48 |
ufm | Hi, ppl!
Please tell me how quickly nodes are added to the list of public peers? | 21:58:17 |
Arceliar | https://github.com/yggdrasil-network/public-peers you can create a pull request | 21:59:58 |
Arceliar | (sign in to github, navigate to the file you want to edit, and click the "edit" button) | 22:00:39 |
ufm | I create pull request 3 days ago | 22:00:50 |
neilalexander | Once a PR has been merged it will appear on publicpeers.neilalexander.dev within an hour | 22:01:02 |
neilalexander | Looks like the PRs just haven’t caught anyone’s attention yet | 22:01:27 |