cjdns

README na Engleskom: README.md

Umrežavanje iznova

Cjdns provodi šifriranu IPv6 mrežu koristeći public-key kriptografiju za dodjelu adresa i distribuiranu hash tablicu za usmjeravanje. To omogućuje gotovo nikakvu mrežnu konfiguraciju i sprječava mnoge sigurnosne i skalabilne probleme koje muče trenutne mreže.

Iskustva

23:26 <@jercos> well, cjdns is now officially more reliable than the open
                internet for getting to my cheaper VPSes :|

12:52 < mariner> so i don't know if it's been done before, and i assume it's
                 obvious, but I think it's neat. Currently on hype from an
                 airplane

00:36 < tester> man sites take so long to load on i2p
00:36 < tester> i value speed over anonymity any day

<DuoNoxSol> it's notably more reliable than the normal internet
<DuoNoxSol> even though it really really shouldn't be
<DuoNoxSol> seeing as the connections are largely over the normal internet

Kada će biti završen?

Hyperboria je najveća cjdns mreža, sa stotinama aktivnih jedinica po cijelom svijetu.

Cjdns je testiran na x86, amd64, ARMv5, ARMv7, MIPS, and PowerPC. Stalno se testira na Linuxu, FreeBSDu, OS X-u, Windowsu and Illumos systemima.

Protokoli i algoritmi su eksperimentalni i mogli bi se promijeniti. Kako biste smanjili štetu mreže, molimo često nadograđujte vaše cjdns jedinke.

I Vi možete pomoći!

We are in need of some buildbots on more obscure systems and architectures. If you would like to donate one, you could mail it, or you could administer it and provide remote shell access. Please email buildbot@seattlemesh.net if you'd like to run a buildbot. Note that it is not a general support inbox, other questions should be directed toward IRC.

Kako radi usmjeravanje?

U cjdns mreži, paket ode do routera i router označi paket sa instrukcijama do rutera koji će ga najbolje obratiti. That is, a router which is physically nearby and has an address numerically close to the destination address of the packet. The directions are added to the packet to allow it to go through a number of routers with minimal handling, a verifiable form of source routing. They just read the label and bounce the packet wherever the next bits in the label tell them to. Routers have a responsibility to "keep in touch" with other routers that are physically close by and numerically near to their address.

Motor usmjerivača je modificirana implementacija Kademlia ddistribuirane hash tablice.

Zajednica

Dokumentacija

Ciljevi projekta
Cjdns Whitepaper
[Cjdns na Wikipediji][]

Napredna konfiguracija:

Licenca

Dostupna ovdje

Hvala Vam za Vaše vrijeme i interes,

Cjdns programeri.

Kako instalirati cjdns

Ove instrukcije su namijenjene za distribucije bazirane na Debian Linux-u i OSX-u. Trebale bi biti dovoljno informativne za korištenje na ostalim distribucijama, ali ne očekujte da će raditi od prve.

0. Install dependencies

On both platforms, installing Node.js, although preferable, is not strictly necessary. If Node.js is unavailable or an unacceptable version, it will be downloaded and installed in the source tree.

Distribucija bazirana na Debian-u:

sudo apt-get install nodejs git build-essential

Distribucija bazirana na Fedori 22+:

sudo dnf install install nodejs git
sudo dnf install @development-tools

Distribucija bazirana na RHEL-u (adds the EPEL repo):

sudo yum localinstall https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum install install nodejs git
sudo yum install @development-tools

OS X:

On OS X, you must install the Command Line Developer Tools. If you already have a recent version of Xcode (>= OS X 10.9 and >= Xcode 5.0.1), run the following command:

xcode-select --install

If Xcode is not installed, you can either install it through the App Store and run the command above, or make a free Apple Developer account here: https://developer.apple.com/downloads/index.action. Then sign in, search for Command Line Tools, and install the latest package compatible with your version of OS X. If you encounter issues, there is a thorough stackoverflow post on installing the Command Line Tools.

You must also install git and Node.js. There are a few options. If you use Homebrew:

brew install git nodejs

Ako koristite Macports:

sudo port install git-core nodejs

Or if you use neither and would like to install the binaries from their websites: doc

Node.js: http://nodejs.org/download/
git: http://git-scm.com/download

OpenBSD:

Nažalost, OpenBSD je trenutno eksperimentalan.

pkg_add git node gcc gmake bash

Odaberite verziju gcc-4.8.1p2 ili noviju.

FreeBSD:

The compiler expects GCC version 4.7, please install it from ports first.

portsnap fetch extract
cd /usr/ports/lang/gcc47/ && make config && make install clean

1. Retrieve cjdns from GitHub

Clone the repository from GitHub and change to the source directory:

git clone https://github.com/cjdelisle/cjdns.git cjdns
cd cjdns

2. Build

./do

Look for Build completed successfully, type ./cjdroute to begin setup., then proceed below:

Setup

Run cjdroute without options for HELP:

./cjdroute

0. Make sure you've got the stuff.

cat /dev/net/tun

If it says: cat: /dev/net/tun: File descriptor in bad state Good!

If it says: cat: /dev/net/tun: No such file or directory, create it using:

sudo mkdir -p /dev/net &&
sudo mknod /dev/net/tun c 10 200 &&
sudo chmod 0666 /dev/net/tun

Zatim pokrenite cat /dev/net/tun opet.

If it says: cat: /dev/net/tun: Permission denied You're probably using a VPS based on the OpenVZ virtualization platform. Ask your provider to enable the TUN/TAP device - this is standard protocol so they should know exactly what you need. If you're on OS X, don't worry about this step.

1. Stvorite novu konfiguracijsku datoteku

./cjdroute --genconf >> cjdroute.conf

Zaštitite Vašu conf datoteku! A lost conf file means you lost your password and connections and anyone who connected to you will no longer be able to connect. A compromised conf file means that other people can impersonate you on the network.

To set generate a conf file with permissions set so that only your user can read it and write to it:

(umask 077 && ./cjdroute --genconf > cjdroute.conf)

2. Pronađite prijatelja

To get into an existing network (e.g. Hyperboria), you need to connect to someone who is already in the network. This is required for a number of reasons:

It helps prevent abuse because bad people will be less likely to abuse a system after they were, in an act of human kindness, given access to that system.
This is not intended to overlay The Old Internet, it is intended to replace it. Each connection will in due time be replaced by a wire, a fiber optic cable, or a wireless network connection.
In any case of a disagreement, there will be a "chain of friends" linking the people involved so there will already be a basis for coming to a resolution.

To find a friend, get out there and join our community. Also, have a look at the Hyperboria Map to find peers near you.

3. Connect your node to your friend's node

To initiate the connection OUTbound

U Vašoj conf datoteci vidjeti ćete:

// Nodes to connect to.
"connectTo":
{
    // Add connection credentials here to join the network
    // Ask somebody who is already connected.
}

A conf file with multiple friend-nodes, setup OUTbound, should look like:

// Nodes to connect to.
"connectTo":
{
    //friend_1 (IPv4: 0.1.2.3; IPv6 fcaa:5bac:66e4:713:cb00:e446:c317:fc39)
    "0.1.2.3:45678":
    {
        "password": "thisIsNotARealConnection_1",
        "publicKey": "thisIsJustForAnExampleDoNotUseThisInYourConfFile_1.k"
    }

    //friend_2 (IPv4: 5.1.2.3; IPv6 fcbb:5bac:66e4:713:cb00:e446:c317:fc39)
    "5.1.2.3:5678":
    {
        "password": "thisIsNotARealConnection_2",
        "publicKey": "thisIsJustForAnExampleDoNotUseThisInYourConfFile_2.k"
    }
}

You can add as many connections as you want to the connectTo attribute, following JSON syntax.

To allow your friend to initiate the connection INbound

U Vašoj conf datoteci vidjeti ćete:

"authorizedPasswords":
    [
        // A unique string which is known to the client and server.
        {"password": "thisisauniquestring_001"}

        // More passwords should look like this.
        // {"password": "thisisauniquestring_002"}
        // {"password": "thisisauniquestring_003"}
        // {"password": "thisisauniquestring_004"}
        ...

        // "your.external.ip.goes.here:45678":{"password": "thisisauniquestring_001","publicKey":thisisauniqueKEY_001.k"}

    ],

A conf file with multiple friend-nodes, setup INbound, should look like:

"authorizedPasswords":
    [
        // A unique string which is known to the client and server.
        {"password": "thisisauniquestring_001"}

        // More passwords should look like this.
        //friend_3 (IPv4: 0.1.2.3; IPv6 fcaa:5bac:66e4:713:cb00:e446:c317:fc39)
        {"password": "thisisauniquestring_002"}
        //friend_4 (IPv4: 5.1.2.3; IPv6 fcbb:5bac:66e4:713:cb00:e446:c317:fc39)
        {"password": "thisisauniquestring_003"}
        // {"password": "thisisauniquestring_004"}
        ...

        // "your.external.ip.goes.here:45678":{"password": "thisisauniquestring_001","publicKey":thisisauniqueKEY_001.k"}

    ],

Morate dati friend_3 (who is making the INbound connection) sljedeće 4 stvari:

Vašu vanjsku IPv4 adresu

The port found in your conf file here:

        `// Bind to this port.
        "bind": "0.0.0.0:yourportnumberishere",`

Their unique password that you uncommented or created: "password": "thisisauniquestring_002"
Vaš javni ključ: "publicKey": "thisisauniqueKEY_001.k"

Please note that you and your friend can initiate a connection either outbound (from YOU --> FRIEND) or inbound (from FRIEND --> YOU) but traffic flows both ways once the connection is established.

See doc/configure.md for more details on configuration, including how to peer with other cjdns nodes over ethernet and wifi.

4. Zaštitite Vaš sustav - check for listening services

Once your node is running, you're now a newly minted IPv6 host. Your operating system may automatically reconfigure network services to use this new address. If this is not what you intend, you should check to see that you are not offering more services then you intended to. ;)

Pogledajte doc/network-services.md za instrukcije.

5. Pokrenite ga!

sudo ./cjdroute < cjdroute.conf

If you want to have your logs written to a file:

sudo ./cjdroute < cjdroute.conf > cjdroute.log

To stop cjdns:

sudo killall cjdroute

If you are having problems use killall cjdroute to return to sanity. Use pgrep cjdroute or top to see if it running.

Note: this starts cjdns as the root user so it can configure your system without concern for permissions. To start cjdns as a non-root user, see doc/non-root-user.md.

6. Get in IRC

Dobrodošli u mrežu! Sada ste mrežni administrator. There are responsibilities which come with being a network administrator which include being available in case there is something wrong with your equipment. You should stay on IRC so that people can reach you.

Administratorsko sučelje

When cjdnroute is up and running, the admin interface will be available at udp://localhost:11234 (this can be changed in the cjdroute.conf configuration file). See doc/admin-api.md for more information about the admin interface. There are several tools in contrib/ that can interact with it.

Možete pristupiti administratorskom API-ju putem:

the Python library; see contrib/python/README.md.
the Perl library, maintained by Mikey; see contrib/perl/CJDNS/README.

README_HR.md 14 KB Байнгын холболт Түүх Анхны өгөгдөл