cwinfo/yggdrasil-go
5
0
Fork 0
mirror of https://github.com/cwinfo/yggdrasil-go.git synced 2024-11-21 20:40:28 +00:00
Code Releases Activity
An experiment in scalable routing as an encrypted IPv6 overlay network
1,943 Commits 2 Branches 0 Tags 3.6 MiB
Go 83.1%
Shell 13.2%
C 3.2%
Dockerfile 0.3%
Makefile 0.2%
709ea6976c
Go to file
rany 709ea6976c
apparmor: allow yggdrasil to resolve hostnames (#739) 
The apparmor profile in it's current state won't allow resolving hostnames. We need `<abstractions/nameservice>` because we simply can't just allow `/etc/resolv.conf`. This is because systemd-resolved, resolvconf, and others rely on symbolic links to `/etc/resolv.conf` which would make this extremely complicated.  `<abstractions/nameservice>` deals with this complexity to allow every single one of those packages (systemd-resolved, resolvconf, ... ).

```
  network inet stream,
  network inet dgram,
  network inet6 dgram,
  network inet6 stream,
  network netlink raw,
```
was removed because it's already included in `<abstractions/nameservice>`. Some permissions that are no longer needed in newer yggdrasil versions were also removed.

`owner /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,` was changed to `/sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,` because there is no guarantee that yggdrasil will always be run as root. (`owner` makes sure that the process's user and the file have the same owner, in that case, root. This might not always be the case so `owner` was removed)
2020-12-06 20:52:10 +00:00
.circleci Don't require lint in pipeline 2020-10-11 16:41:40 +01:00
cmd Merge branch 'future' into develop-future 2020-09-27 20:28:26 +01:00
contrib apparmor: allow yggdrasil to resolve hostnames (#739) 2020-12-06 20:52:10 +00:00
doc Fix typos 2019-11-29 11:45:02 +02:00
misc golangci-lint in CI (#733) 2020-09-27 14:28:25 +01:00
src Return ICMPv6 Destination Unreachable for unknown destinations (#748) 2020-12-06 19:47:25 +00:00
.gitmodules Update README.md 2019-03-13 20:06:02 +00:00
.golangci.yml golangci-lint in CI (#733) 2020-09-27 14:28:25 +01:00
appveyor.yml Clean up appveyor.yml 2019-11-28 15:17:49 +00:00
build Don't preserve LDFLAGS from environment after all since they are probably go-specific 2020-01-06 19:37:24 +00:00
CHANGELOG.md Update changelog 2020-09-27 15:05:14 +01:00
clean Use #!/bin/sh for clean script 2018-12-26 14:26:29 +00:00
Dockerfile Creating Dockerfile to / 2018-12-03 06:06:58 +02:00
go.mod Clean go.mod/go.sum 2020-11-15 13:32:28 +00:00
go.sum Clean go.mod/go.sum 2020-11-15 13:32:28 +00:00
LICENSE Rename LICENSE.md to LICENSE 2018-12-03 06:46:05 +02:00
README.md README: mention Nix package (#689) 2020-09-27 13:24:19 +01:00

README.md

Yggdrasil

CircleCI

Introduction

Yggdrasil is an early-stage implementation of a fully end-to-end encrypted IPv6 network. It is lightweight, self-arranging, supported on multiple platforms and allows pretty much any IPv6-capable application to communicate securely with other Yggdrasil nodes. Yggdrasil does not require you to have IPv6 Internet connectivity - it also works over IPv4.

Although Yggdrasil shares many similarities with cjdns, it employs a different routing algorithm based on a globally-agreed spanning tree and greedy routing in a metric space, and aims to implement some novel local backpressure routing techniques. In theory, Yggdrasil should scale well on networks with internet-like topologies.

Supported Platforms

We actively support the following platforms, and packages are available for some of the below:

  • Linux
    • .deb and .rpm packages are built by CI for Debian and Red Hat-based distributions
    • Arch, Nix, Void packages also available within their respective repositories
  • macOS
    • .pkg packages are built by CI
  • Ubiquiti EdgeOS
    • .deb Vyatta packages are built by CI
  • Windows
  • FreeBSD
  • OpenBSD
  • OpenWrt

Please see our Platforms pages for more specific information about each of our supported platforms, including installation steps and caveats.

You may also find other platform-specific wrappers, scripts or tools in the contrib folder.

Building

If you want to build from source, as opposed to installing one of the pre-built packages:

  1. Install Go (requires Go 1.13 or later)
  2. Clone this repository
  3. Run ./build

Note that you can cross-compile for other platforms and architectures by specifying the GOOS and GOARCH environment variables, e.g. GOOS=windows ./build or GOOS=linux GOARCH=mipsle ./build.

Running

Generate configuration

To generate static configuration, either generate a HJSON file (human-friendly, complete with comments):

./yggdrasil -genconf > /path/to/yggdrasil.conf

... or generate a plain JSON file (which is easy to manipulate programmatically):

./yggdrasil -genconf -json > /path/to/yggdrasil.conf

You will need to edit the yggdrasil.conf file to add or remove peers, modify other configuration such as listen addresses or multicast addresses, etc.

Run Yggdrasil

To run with the generated static configuration:

./yggdrasil -useconffile /path/to/yggdrasil.conf

To run in auto-configuration mode (which will use sane defaults and random keys at each startup, instead of using a static configuration file):

./yggdrasil -autoconf

You will likely need to run Yggdrasil as a privileged user or under sudo, unless you have permission to create TUN/TAP adapters. On Linux this can be done by giving the Yggdrasil binary the CAP_NET_ADMIN capability.

Documentation

Documentation is available on our GitHub Pages site, or in the base submodule repository within doc/yggdrasil-network.github.io.

Community

Feel free to join us on our Matrix channel at #yggdrasil:matrix.org or in the #yggdrasil IRC channel on Freenode.

License

This code is released under the terms of the LGPLv3, but with an added exception that was shamelessly taken from godeb. Under certain circumstances, this exception permits distribution of binaries that are (statically or dynamically) linked with this code, without requiring the distribution of Minimal Corresponding Source or Minimal Application Code. For more details, see: LICENSE.