https://kbu.freifunk.net/wiki/api.php?action=feedcontributions&feedformat=atom&user=Hundfred
Freifunk Köln, Bonn und Umgebung - Benutzerbeiträge [de]
2026-04-09T14:41:13Z
Benutzerbeiträge
MediaWiki 1.38.2
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2288
Supernode
2013-03-29T11:23:00Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
not documented in here (todo)<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy (or whatever you like)<br />
<br />
<br />
load batman-adv kernel-module while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fastd configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we exchange keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#on establish "/root/scripts/fastdup.sh"; #does'not work for me, need to invoke an external script somewhere else<br />
</pre><br />
<br />
<br />
fastd-ifup-script,<br />
<br />
<pre><br />
#/bin/sh<br />
<br />
#bring the interface up<br />
/sbin/ifconfig fastd up<br />
<br />
#start bat0 interface<br />
/usr/sbin/batctl if add fastd<br />
#dhcp forward through batman<br />
/usr/sbin/batctl gw_mode server<br />
/sbin/ifconfig bat0 172.27.XX.1 netmask 255.255.192.0 up<br />
<br />
#routing <br />
/sbin/ip rule add from 172.27.0.0/18 table ffkbu<br />
/sbin/ip route add 172.27.0.0/18 dev bat0 table ffkbu<br />
/sbin/ip route flush cache<br />
</pre><br />
<br />
<br />
'''backbone-net (tinc)'''<br />
<pre><br />
apt-get install tinc<br />
</pre><br />
<br />
<pre><br />
root@fastd4:/etc/tinc/backbone# ls <br />
bbkeys<br />
hosts -> bbkeys<br />
tinc.conf<br />
tinc-up<br />
</pre><br />
<br />
public-keys for the tinc-backbone, can be found<br />
[[https://github.com/ff-kbu/bbkeys| here]]<br />
<br />
add your public key to that repo<br />
<br />
tinc.conf<br />
<pre><br />
/etc/tinc/backbone# cat tinc.conf <br />
Name=fastd4<br />
Device=/dev/net/tun<br />
Mode=router<br />
ConnectTo=paula<br />
ConnectTo=paul<br />
#enough links?<br />
</pre><br />
<br />
<br />
tinc-up <br />
<pre> <br />
#!/bin/sh<br />
ifconfig $INTERFACE 172.27.255.X netmask 255.255.255.0 up<br />
#<br />
#set some backbone related routes<br />
ip route add 172.27.255.0/24 dev backbone table ffkbu<br />
ip route add default dev backbone table ffkbu<br />
ip route flush cache<br />
</pre><br />
<br />
<br />
'''routing'''<br />
<br />
we need to set up policy based routing.<br />
<br />
<pre><br />
echo "200 ffkbu" >> /etc/iproute2/rt_tables<br />
</pre><br />
<br />
this is done in the tinc-up and the fastd-up scripts<br />
<br />
ip rule ls<br />
<pre><br />
ip rule ls<br />
0: from all lookup local <br />
32765: from 172.27.0.0/18 lookup ffkbu <br />
32766: from all lookup main <br />
32767: from all lookup default<br />
</pre><br />
<br />
ip route list table ffkbu<br />
<pre><br />
ip route list table ffkbu<br />
default dev backbone scope link <br />
172.27.0.0/18 dev bat0 scope link <br />
172.27.255.0/24 dev backbone scope link <br />
</pre><br />
<br />
dhcpd.conf<br />
<pre><br />
subnet 172.27.0.0 netmask 255.255.192.0 {<br />
#if guru talks about subnets,<br />
#just the range is meant! <br />
#all nodes,supernodes,and clients <br />
#remain in the net 172.27.0.0/18<br />
range 172.27.XXX.XXX 172.27.XXX.XXX;<br />
option domain-name-servers 172.27.XXX.1;<br />
option domain-name "kbu.freifunk.net";<br />
option routers 172.27.XXX.1;<br />
option broadcast-address 172.27.63.255;<br />
default-lease-time 600;<br />
max-lease-time 7200;<br />
}<br />
</pre><br />
<br />
you need to install a bind9</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2287
Supernode
2013-03-29T11:18:28Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
not documented in here (todo)<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy (or whatever you like)<br />
<br />
<br />
load batman-adv kernel-module while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fastd configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we change keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script<br />
</pre><br />
<br />
<br />
fastd-ifup-script,<br />
<br />
<pre><br />
#/bin/sh<br />
<br />
#bring the interface up<br />
/sbin/ifconfig fastd up<br />
<br />
#start bat0 interface<br />
/usr/sbin/batctl if add fastd<br />
#dhcp forward through batman<br />
/usr/sbin/batctl gw_mode server<br />
/sbin/ifconfig bat0 172.27.XX.1 netmask 255.255.192.0 up<br />
<br />
#routing <br />
/sbin/ip rule add from 172.27.0.0/18 table ffkbu<br />
/sbin/ip route add 172.27.0.0/18 dev bat0 table ffkbu<br />
/sbin/ip route flush cache<br />
</pre><br />
<br />
<br />
'''backbone-net (tinc)'''<br />
<pre><br />
root@fastd4:/etc/tinc/backbone# ls <br />
bbkeys<br />
hosts -> bbkeys<br />
tinc.conf<br />
tinc-up<br />
</pre><br />
<br />
public-keys for the tinc-backbone, can be found<br />
[[https://github.com/ff-kbu/bbkeys| here]]<br />
<br />
add your public key to that repo<br />
<br />
tinc.conf<br />
<pre><br />
/etc/tinc/backbone# cat tinc.conf <br />
Name=fastd4<br />
Device=/dev/net/tun<br />
Mode=router<br />
ConnectTo=paula<br />
ConnectTo=paul<br />
</pre><br />
<br />
<br />
tinc-up <br />
<pre> <br />
#!/bin/sh<br />
ifconfig $INTERFACE 172.27.255.X netmask 255.255.255.0 up<br />
#<br />
#set some backbone related routes<br />
ip route add 172.27.255.0/24 dev backbone table ffkbu<br />
ip route add default dev backbone table ffkbu<br />
ip route flush cache<br />
</pre><br />
<br />
<br />
'''routing'''<br />
<br />
we need to set up policy based routing.<br />
<br />
<pre><br />
echo "200 ffkbu" >> /etc/iproute2/rt_tables<br />
</pre><br />
<br />
this is done in the tinc-up and the fastd-up scripts<br />
<br />
ip rule ls<br />
<pre><br />
ip rule ls<br />
0: from all lookup local <br />
32765: from 172.27.0.0/18 lookup ffkbu <br />
32766: from all lookup main <br />
32767: from all lookup default<br />
</pre><br />
<br />
ip route list table ffkbu<br />
<pre><br />
ip route list table ffkbu<br />
default dev backbone scope link <br />
172.27.0.0/18 dev bat0 scope link <br />
172.27.255.0/24 dev backbone scope link <br />
</pre><br />
<br />
dhcpd.conf<br />
<pre><br />
subnet 172.27.0.0 netmask 255.255.192.0 {<br />
#if guru talks about subnets,<br />
#just the range is meant! <br />
#all nodes,supernodes,and clients <br />
#remain in the net 172.27.0.0/18<br />
range 172.27.XXX.XXX 172.27.XXX.XXX;<br />
option domain-name-servers 172.27.XXX.1;<br />
option domain-name "kbu.freifunk.net";<br />
option routers 172.27.XXX.1;<br />
option broadcast-address 172.27.63.255;<br />
default-lease-time 600;<br />
max-lease-time 7200;<br />
}<br />
</pre><br />
<br />
so you need to install a bind9</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2286
Supernode
2013-03-29T11:01:07Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
not documented in here (todo)<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy (or whatever you like)<br />
<br />
<br />
load batman-adv kernel-module while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fastd configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we change keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script<br />
</pre><br />
<br />
<br />
fastd-ifup-script,<br />
<br />
<pre><br />
#/bin/sh<br />
<br />
#bring the interface up<br />
/sbin/ifconfig fastd up<br />
<br />
#start bat0 interface<br />
/usr/sbin/batctl if add fastd<br />
#dhcp forward through batman<br />
/usr/sbin/batctl gw_mode server<br />
/sbin/ifconfig bat0 172.27.XX.1 netmask 255.255.192.0 up<br />
<br />
#routing <br />
/sbin/ip rule add from 172.27.0.0/18 table ffkbu<br />
/sbin/ip route add 172.27.0.0/18 dev bat0 table ffkbu<br />
/sbin/ip route flush cache<br />
</pre><br />
<br />
<br />
'''backbone-net (tinc)'''<br />
<pre><br />
root@fastd4:/etc/tinc/backbone# ls <br />
bbkeys<br />
hosts -> bbkeys<br />
tinc.conf<br />
tinc-up<br />
</pre><br />
<br />
public-keys for the tinc-backbone, can be found<br />
[[https://github.com/ff-kbu/bbkeys| here]]<br />
<br />
add your public key to that repo<br />
<br />
tinc.conf<br />
<pre><br />
/etc/tinc/backbone# cat tinc.conf <br />
Name=fastd4<br />
Device=/dev/net/tun<br />
Mode=router<br />
ConnectTo=paula<br />
ConnectTo=paul<br />
</pre><br />
<br />
<br />
tinc-up <br />
<pre> <br />
#!/bin/sh<br />
ifconfig $INTERFACE 172.27.255.10 netmask 255.255.255.0 up<br />
#<br />
#set some backbone related routes<br />
ip route add 172.27.255.0/24 dev backbone table ffkbu<br />
ip route add default dev backbone table ffkbu<br />
ip route flush cache<br />
</pre><br />
<br />
<br />
'''routing'''<br />
<br />
we need to set up policy based routing.<br />
<br />
<pre><br />
echo "200 ffkbu" >> /etc/iproute2/rt_tables<br />
</pre><br />
<br />
this is done in the tinc-up and the fastd-up scripts<br />
<br />
ip rule ls<br />
<pre><br />
ip rule ls<br />
0: from all lookup local <br />
32765: from 172.27.0.0/18 lookup ffkbu <br />
32766: from all lookup main <br />
32767: from all lookup default<br />
</pre><br />
<br />
ip route list table ffkbu<br />
<pre><br />
ip route list table ffkbu<br />
default dev backbone scope link <br />
172.27.0.0/18 dev bat0 scope link <br />
172.27.255.0/24 dev backbone scope link <br />
</pre><br />
<br />
dhcpd.conf<br />
<pre><br />
subnet 172.27.0.0 netmask 255.255.192.0 {<br />
#if guru talks about subnets,<br />
#just the range is meant! <br />
#all nodes,supernodes,and clients <br />
#remain in the net 172.27.0.0/18<br />
range 172.27.XXX.XXX 172.27.XXX.XXX;<br />
option domain-name-servers 172.27.XXX.1;<br />
option domain-name "kbu.freifunk.net";<br />
option routers 172.27.XXX.1;<br />
option broadcast-address 172.27.63.255;<br />
default-lease-time 600;<br />
max-lease-time 7200;<br />
}<br />
</pre><br />
<br />
so you need to install a bind9</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2285
Supernode
2013-03-29T11:00:31Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
not documented in here (todo)<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy (or whatever you like)<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fastd configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we change keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script<br />
</pre><br />
<br />
<br />
fastd-ifup-script,<br />
<br />
<pre><br />
#/bin/sh<br />
<br />
#bring the interface up<br />
/sbin/ifconfig fastd up<br />
<br />
#start bat0 interface<br />
/usr/sbin/batctl if add fastd<br />
#dhcp forward through batman<br />
/usr/sbin/batctl gw_mode server<br />
/sbin/ifconfig bat0 172.27.XX.1 netmask 255.255.192.0 up<br />
<br />
#routing <br />
/sbin/ip rule add from 172.27.0.0/18 table ffkbu<br />
/sbin/ip route add 172.27.0.0/18 dev bat0 table ffkbu<br />
/sbin/ip route flush cache<br />
</pre><br />
<br />
<br />
'''backbone-net (tinc)'''<br />
<pre><br />
root@fastd4:/etc/tinc/backbone# ls <br />
bbkeys<br />
hosts -> bbkeys<br />
tinc.conf<br />
tinc-up<br />
</pre><br />
<br />
public-keys for the tinc-backbone, can be found<br />
[[https://github.com/ff-kbu/bbkeys| here]]<br />
<br />
add your public key to that repo<br />
<br />
tinc.conf<br />
<pre><br />
/etc/tinc/backbone# cat tinc.conf <br />
Name=fastd4<br />
Device=/dev/net/tun<br />
Mode=router<br />
ConnectTo=paula<br />
ConnectTo=paul<br />
</pre><br />
<br />
<br />
tinc-up <br />
<pre> <br />
#!/bin/sh<br />
ifconfig $INTERFACE 172.27.255.10 netmask 255.255.255.0 up<br />
#<br />
#set some backbone related routes<br />
ip route add 172.27.255.0/24 dev backbone table ffkbu<br />
ip route add default dev backbone table ffkbu<br />
ip route flush cache<br />
</pre><br />
<br />
<br />
'''routing'''<br />
<br />
we need to set up policy based routing.<br />
<br />
<pre><br />
echo "200 ffkbu" >> /etc/iproute2/rt_tables<br />
</pre><br />
<br />
this is done in the tinc-up and the fastd-up scripts<br />
<br />
ip rule ls<br />
<pre><br />
ip rule ls<br />
0: from all lookup local <br />
32765: from 172.27.0.0/18 lookup ffkbu <br />
32766: from all lookup main <br />
32767: from all lookup default<br />
</pre><br />
<br />
ip route list table ffkbu<br />
<pre><br />
ip route list table ffkbu<br />
default dev backbone scope link <br />
172.27.0.0/18 dev bat0 scope link <br />
172.27.255.0/24 dev backbone scope link <br />
</pre><br />
<br />
dhcpd.conf<br />
<pre><br />
subnet 172.27.0.0 netmask 255.255.192.0 {<br />
#if guru talks about subnets,<br />
#just the range is meant! <br />
#all nodes,supernodes,and clients <br />
#remain in the net 172.27.0.0/18<br />
range 172.27.XXX.XXX 172.27.XXX.XXX;<br />
option domain-name-servers 172.27.XXX.1;<br />
option domain-name "kbu.freifunk.net";<br />
option routers 172.27.XXX.1;<br />
option broadcast-address 172.27.63.255;<br />
default-lease-time 600;<br />
max-lease-time 7200;<br />
}<br />
</pre><br />
<br />
so you need to install a bind9</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2284
Supernode
2013-03-29T10:57:33Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
not documented in here (todo)<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fastd configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we change keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script<br />
</pre><br />
<br />
<br />
fastd-ifup-script,<br />
<br />
<pre><br />
#/bin/sh<br />
<br />
#bring the interface up<br />
/sbin/ifconfig fastd up<br />
<br />
#start bat0 interface<br />
/usr/sbin/batctl if add fastd<br />
#dhcp forward through batman<br />
/usr/sbin/batctl gw_mode server<br />
/sbin/ifconfig bat0 172.27.XX.1 netmask 255.255.192.0 up<br />
<br />
#routing <br />
/sbin/ip rule add from 172.27.0.0/18 table ffkbu<br />
/sbin/ip route add 172.27.0.0/18 dev bat0 table ffkbu<br />
/sbin/ip route flush cache<br />
</pre><br />
<br />
<br />
'''backbone-net (tinc)'''<br />
<pre><br />
root@fastd4:/etc/tinc/backbone# ls <br />
bbkeys<br />
hosts -> bbkeys<br />
tinc.conf<br />
tinc-up<br />
</pre><br />
<br />
public-keys for the tinc-backbone, can be found<br />
[[https://github.com/ff-kbu/bbkeys| here]]<br />
<br />
add your public key to that repo<br />
<br />
tinc.conf<br />
<pre><br />
/etc/tinc/backbone# cat tinc.conf <br />
Name=fastd4<br />
Device=/dev/net/tun<br />
Mode=router<br />
ConnectTo=paula<br />
ConnectTo=paul<br />
</pre><br />
<br />
<br />
tinc-up <br />
<pre> <br />
#!/bin/sh<br />
ifconfig $INTERFACE 172.27.255.10 netmask 255.255.255.0 up<br />
#<br />
#set some backbone related routes<br />
ip route add 172.27.255.0/24 dev backbone table ffkbu<br />
ip route add default dev backbone table ffkbu<br />
ip route flush cache<br />
</pre><br />
<br />
<br />
'''routing'''<br />
<br />
we need to set up policy based routing.<br />
<br />
<pre><br />
echo "200 ffkbu" >> /etc/iproute2/rt_tables<br />
</pre><br />
<br />
this is done in the tinc-up and the fastd-up scripts<br />
<br />
ip rule ls<br />
<pre><br />
ip rule ls<br />
0: from all lookup local <br />
32765: from 172.27.0.0/18 lookup ffkbu <br />
32766: from all lookup main <br />
32767: from all lookup default<br />
</pre><br />
<br />
ip route list table ffkbu<br />
<pre><br />
ip route list table ffkbu<br />
default dev backbone scope link <br />
172.27.0.0/18 dev bat0 scope link <br />
172.27.255.0/24 dev backbone scope link <br />
</pre><br />
<br />
dhcpd.conf<br />
<pre><br />
subnet 172.27.0.0 netmask 255.255.192.0 {<br />
#if guru talks about subnets,<br />
#just the range is meant! <br />
#all nodes,supernodes,and clients <br />
#remain in the net 172.27.0.0/18<br />
range 172.27.XXX.XXX 172.27.XXX.XXX;<br />
option domain-name-servers 172.27.XXX.1;<br />
option domain-name "kbu.freifunk.net";<br />
option routers 172.27.XXX.1;<br />
option broadcast-address 172.27.63.255;<br />
default-lease-time 600;<br />
max-lease-time 7200;<br />
}<br />
</pre><br />
<br />
so you need to install a bind9</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2283
Supernode
2013-03-29T10:55:23Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
not documented in here (todo)<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fastd configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we change keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script<br />
</pre><br />
<br />
<br />
fastd-ifup-script,<br />
<br />
<pre><br />
#/bin/sh<br />
<br />
#bring the interface up<br />
/sbin/ifconfig fastd up<br />
<br />
#start bat0 interface<br />
/usr/sbin/batctl if add fastd<br />
#dhcp forward through batman<br />
/usr/sbin/batctl gw_mode server<br />
/sbin/ifconfig bat0 172.27.XX.1 netmask 255.255.192.0 up<br />
<br />
#routing <br />
/sbin/ip rule add from 172.27.0.0/18 table ffkbu<br />
/sbin/ip route add 172.27.0.0/18 dev bat0 table ffkbu<br />
/sbin/ip route flush cache<br />
</pre><br />
<br />
<br />
'''backbone-net (tinc)'''<br />
<pre><br />
root@fastd4:/etc/tinc/backbone# ls <br />
bbkeys<br />
hosts -> bbkeys<br />
tinc.conf<br />
tinc-up<br />
</pre><br />
<br />
public-keys for the tinc-backbone, can be found<br />
[[https://github.com/ff-kbu/bbkeys| here]]<br />
<br />
add your public key to that repo<br />
<br />
tinc.conf<br />
<pre><br />
/etc/tinc/backbone# cat tinc.conf <br />
Name=fastd4<br />
Device=/dev/net/tun<br />
Mode=router<br />
ConnectTo=paula<br />
ConnectTo=paul<br />
</pre><br />
<br />
<br />
tinc-up <br />
<pre> <br />
#!/bin/sh<br />
ifconfig $INTERFACE 172.27.255.10 netmask 255.255.255.0 up<br />
#<br />
#set some backbone related routes<br />
ip route add 172.27.255.0/24 dev backbone table ffkbu<br />
ip route add default dev backbone table ffkbu<br />
ip route flush cache<br />
</pre><br />
<br />
<br />
'''routing'''<br />
<br />
we need to set up policy based routing.<br />
<br />
<pre><br />
echo "200 ffkbu" >> /etc/iproute2/rt_tables<br />
</pre><br />
<br />
this is done in the tinc-up and the fastd-up scripts<br />
<br />
ip rule ls<br />
<pre><br />
ip rule ls<br />
0: from all lookup local <br />
32765: from 172.27.0.0/18 lookup ffkbu <br />
32766: from all lookup main <br />
32767: from all lookup default<br />
</pre><br />
<br />
ip route list table ffkbu<br />
<pre><br />
ip route list table ffkbu<br />
default dev backbone scope link <br />
172.27.0.0/18 dev bat0 scope link <br />
172.27.255.0/24 dev backbone scope link <br />
</pre><br />
<br />
dhcpd.conf<br />
<pre><br />
subnet 172.27.0.0 netmask 255.255.192.0 {<br />
#if guru talks about subnets,<br />
#just the range is meant! <br />
#all nodes,supernodes,and clients <br />
#remain in the net 172.27.0.0/18<br />
range 172.27.XXX.XXX 172.27.XXX.XXX;<br />
option domain-name-servers 172.27.XXX.1;<br />
option domain-name "kbu.freifunk.net";<br />
option routers 172.27.XXX.1;<br />
option broadcast-address 172.27.63.255;<br />
default-lease-time 600;<br />
max-lease-time 7200;<br />
}<br />
</pre><br />
<br />
so you need to install a bind9 <br />
and to forward the requests to,</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2282
Supernode
2013-03-29T09:51:02Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
i don't like that word, <br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fast configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more<br />
<br />
<br />
fastd.conf<br />
<pre><br />
# Log everything to a log file<br />
log to "/var/log/fastd.log" level debug; <br />
# Set the interface name<br />
interface "fastd";<br />
<br />
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20<br />
method "xsalsa20-poly1305";<br />
method "aes128-gcm";<br />
method "null"; #todo: WTF, encryption is off!?, what do we change keys for?<br />
<br />
# Bind to a fixed port, IPv4 only<br />
bind 0.0.0.0:10000;<br />
<br />
# Secret key generated by `fastd --generate-key`<br />
# in this case you have to ask the holy guru of that project for the private key'<br />
secret "won't tell my secret here";<br />
<br />
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE)<br />
# (see MTU selection documentation)<br />
mtu 1426;<br />
# Include peers from the directory 'peers'<br />
include peers from "/etc/fastd/kbu/backbone";<br />
include peers from "/etc/fastd/kbu/peers";<br />
<br />
#ipadress, routing<br />
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script<br />
<pre></div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2281
Supernode
2013-03-29T09:26:02Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre><br />
<br />
<br />
fast configuration<br />
<pre><br />
/etc/fastd/kbu# ls<br />
backbone fastd.conf peers <br />
<br />
<br />
root@fastd4:/etc/fastd/kbu# ls backbone/<br />
fastd1 fastd2 fastd3 fastd4<br />
root@fastd4:/etc/fastd/kbu# cat backbone/*<br />
key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10";<br />
remote ipv4 "fastd2.kbu.freifunk.net" port 10000;<br />
key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0";<br />
remote ipv4 "fastd3.kbu.freifunk.net" port 10000;<br />
key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621";<br />
remote ipv4 "fastd1.kbu.freifunk.net" port 10000;<br />
</pre><br />
<br />
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]]</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2280
Supernode
2013-03-29T09:17:12Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre><br />
<br />
<br />
'''fastd'''<br />
in /etc/apt/apt/sources.list add<br />
<pre><br />
deb http://repo.universe-factory.net/debian/ sid main<br />
</pre><br />
<br />
keyimport<br />
<pre><br />
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8<br />
gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -<br />
</pre><br />
<br />
install fastd<br />
<pre><br />
apt-get update<br />
apt-get install fastd<br />
</pre></div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2279
Supernode
2013-03-29T09:08:17Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre><br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre></div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2278
Supernode
2013-03-29T09:08:03Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
in /etc/modules.conf add<br />
<pre><br />
batman-adv<br />
</pre><br />
<br />
disable pmtu-discovery<br />
in /etc/sysctl.conf add<br />
<pre<br />
net.ipv4.ip_no_pmtu_disc=1<br />
</pre></div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2277
Supernode
2013-03-29T09:02:35Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
{| border="1" cellspacing="0" cellpadding="5" align="left" bgcolor="efefef"<br />
|-<br />
!/etc/modules.conf<br />
|- <br />
|batman-adv<br />
|}<br />
<br />
<br />
disable pmtu-discovery<br />
{| border="1" cellspacing="0" cellpadding="5" align="left" bgcolor="efefef"<br />
|-<br />
!/etc/sysctl.conf<br />
|- <br />
|net.ipv4.ip_no_pmtu_disc=1<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2276
Supernode
2013-03-29T09:00:10Z
<p>Hundfred: </p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead (apache,ruby,sinatra ...), [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki| batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn<br />
<br />
5) OS: debian wheezy<br />
<br />
<br />
load batman-adv kernel while booting<br />
{| border="1" cellspacing="0" cellpadding="5" align="left" bgcolor="d0d0d0"<br />
|-<br />
!/etc/modules.conf<br />
|- <br />
|batman-adv<br />
|}<br />
<br />
disable pmtu-discovery<br />
{| border="1" cellspacing="0" cellpadding="5" align="left" bgcolor="d0d0d0"<br />
|-<br />
!/etc/sysctl.conf<br />
|- <br />
|net.ipv4.ip_no_pmtu_disc=1<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Supernode&diff=2275
Supernode
2013-03-29T08:26:36Z
<p>Hundfred: Die Seite wurde neu angelegt: „https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article quick'n dirty required software: 1) [[https://projects.universe-factory.net/p…“</p>
<hr />
<div>[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]]<br />
<br />
quick'n dirty <br />
required software:<br />
<br />
1) [[https://projects.universe-factory.net/projects/fastd| fastd]] mesh-node-vpn<br />
<br />
2) [[https://github.com/ff-kbu/fastd-service| vpn-key-upload]] todo: remove overhead, [https://en.wikipedia.org/wiki/KISS_principle| kiss principle]]<br />
<br />
3) [[http://www.open-mesh.org/projects/open-mesh/wiki|batman-adv]]<br />
<br />
4) [[http://www.tinc-vpn.org/| tinc]] mesh-backbone-vpn</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Architektur&diff=2274
Architektur
2013-03-29T07:55:42Z
<p>Hundfred: </p>
<hr />
<div>{{TOCright}}''Hinweis: Jans Seite zur Architektur im FF-Netz - WIP. Bitte NICHT ändern.''<br />
<br />
Freifunk-KBU verolgt die [[Netzwerk-Konfiguration#Komplettes_Bridging | Komplettes Bridging]]-Strategie: Fastd-Server verbinden als Super-Nodes WLAN-Mesh-Partionen. IP-Adressen werden per DHCP und radvd vergeben. Ein routed Backbone-VPN (tinc) verbindet die Supernodes und ermöglicht Routing zum Exit.<br />
<br />
== Einleitung ==<br />
Dieser Artikel beschreibt die Architektur des in Köln, Bonn und Umgebung verwendeten Freifunk-Netzes. Dabei wird insbesondere auf die Zusammenhänge zwischen Server-Konfiguration und Firmware-Eigeschaften eingegangen. Hierbei gibt die Architektur vor, wie Nodes, Super-Nodes, Server und Klienten konfiguriert werden müssen. <br />
<br />
Im Rahmen der Einleitung wird die verwendete Stratgie (''komplettes Briding'') dargelegt. Die folgenden Absätze (OSI-2: Briding, OSI-3: Routing) gehen detailliert auf die verschiedenen Schichten des Netzes ein. Der letzte Absatz gibt einen Ausblick auf mögliche Änderung, die in Zukunft einziehen können.<br />
<br />
=== Strategie ===<br />
Das Netz besteht aus Klienten, Nodes und Super-Nodes. Die verwendete [[Netzwerk-Konfiguration#Komplettes_Bridging | Komplettes Bridging Stratgie]] sieht vor, dass das komplette Netz ein einziges zusammehängendes OSI-2 Segment bildet. Dieses Segment verbindet alle Teilnehmer. Dadurch sind je 2 Klienten in verschiedenen Teilen des Netzes immer über eine zu Grunde liegende Infrastruktur via "Ethernet" (WLAN / LAN) miteinander verbunden. Für die Infrastruktur wird batman-adv (http://www.open-mesh.org/) verwendet - sie wird als hierachisches [[Wikipedia:Peer-to-Peer | P2P-Netz]] realisiert. Somit: <br /><br />
''Daten zwischen Netzteilnehmer werden als Frames switched, das Netz bildet eine große Broadcast-/Link-Local-Multicast-Domäne.''<br />
<br />
=== Super-Nodes ===<br />
[[Datei:Super-node-overview.png|thumb|300px|right|Abb. 1]]<br />
[[supernode|Super-Nodes]] (auch: fastd-Server) sind Nodes, die VPN-Verbindungen von Nodes entgegen nehmen. Ein Super-Node ist im Internet erreichbar, d.h. Nodes können VPN-Verbindungen dorthin initiieren, auch wenn sie sich z.B. hinter einem [[Wikipedia:Network_Address_Translation | NAT]] befinden. Super-Nodes verfügen über eine gute Internet-Anbindung (100MBit/s). Jeder Node hält typischerweise VPN-Verbindungen zu zwei verschiedenen Super-Nodes. Adressen und VPN-Schlüssel der Super-Nodes sind fest in der Node-Firmware verdrahtet.<br />
<br />
Super-Nodes werden beispielsweise auf dedizierten Servern ohne WLAN-Konnektivität betrieben.<br />
Abb. 1 zeigt die Kommunikation zwischen Klienten, Nodes und Super-Nodes. Die Nodes A und B sind mit den Super-Nodes fastd1 und fastd2 verbunden. Über die eingezeichneten Verbindungen werden batman-adv Frames versendet. Der Klient ist im Infrastruktur-Netz an Node A eingebucht - es werden gewöhnliche Wireless-Lan-Frames verwendet. (''kein batman-adv'')<br />
<br />
=== Nodes ===<br />
[[Datei:4.1-All-Bridging.png|thumb|300px|right|Abb. 2]]<br />
Auf den Nodes existieren verschiedene Netze, die teilweise mit einander verbunden sind (Abb. 2). Jeder Node spannt dabei zwei Wireless-Lan-Netze auf und ggf. eine VPN-Verbindung auf.<br />
<br />
* ''wlan0'' wird als "Master"-Netz betrieben<br />
* ''wlan1'' arbeitet als "Ad-Hoc"-Netz <br />
* ''tap0'' ist das VPN-Interface. <br />
<br />
wlan1 und tap0 sind hierbei dem ''bat0'' Interface hinzugefügt. <br />
<br />
''Hinweis'': Aus technischen Gründen (u.a. vlan-Fähigkeit einzelner Geräte), weichen Interface-Namen in der Node-Firmware z.T. ab.<br />
<br />
== OSI-2: Data-Link-Layer ==<br />
[[Datei:Osi-2.png|thumb|300px|right|Abb. 3]]<br />
<br />
Die komplettes Bridging Strategie sieht vor, dass alle Stationen zu einem OSI-2 Segment zusammen gefasst werden. Hierbei werden LAN, WLAN und VPN-Verbindungen via bridging verbunden. In diesem Absatz wird die Konfigration der verschiedenen Komponenten des Segements erläutert. Abb. 3 illustiert das Segment. Es besteht aus den Super-Nodes fastd1, fastd2 und fastd3, den Nodes A, B, C und D sowie zwei Klienten. <br />
* Nodes A, B und C sind per Kabel mit dem Internet verbunden und bauen eine VPN-Verbindung zu jeweils zwei Super-Nodes auf.<br />
* Node D verfügt über keine kabelgebundene Verbindung zum Internet. Er ist via ad-hoc wlan mit der Wolke verbunden<br />
* Entlang der blau eingezeichneten Verbindungen werden batman-adv Frames ausgetauscht.<br />
Die Nodes werden daher via batman-adv TT-annouces im Mesh bekannt gemacht. Bridge-Loop-Avoidance (BLA) wird nicht verwendet (http://www.open-mesh.org/projects/batman-adv/wiki/Understand-your-batman-adv-network)<br />
<br />
=== Node-IDs ===<br />
Jedem Node wird eine eindeutige ID zugewiesen. Sie entspricht der Hardware-Adresse gemäß Aufkleber - Trennzeichen werden entfernt. (Beispiel: Hardware-Adresse: <tt>F4:EC:38:E9:72:34</tt> => Node-ID: <tt>f4ec38e97234</tt>. Verfügt ein Node über mehrere Interfaces, so wird die des ersten (gemäß Treiber- / Kernel Numerierung) 2.4 GHz-Interface verwendet.<br />
<br />
=== Wireless LAN ===<br />
Im Freifunk-KBU Netz wird IEEE 802.11g/n verwendet:<br />
* Das Infrastruktur-Netz führt die SSID kbu.freifunk.net. Für Klienten erscheint es als normaler Accesspoint.<br />
* Das Ad-Hoc Netz nutzt die ESSID und BSSID: 02:d1:11:37:fc:39. Es ermöglicht die direkte Kommunikation zwischen verschiedenen Nodes.<br />
<br />
=== VPN ===<br />
==== Verwendung ====<br />
Verfügt ein Node über einen drahtgebundenen Zugang zum Internet, so baut er eine VPN-Verbindung auf. Als VPN wird fastd (https://projects.universe-factory.net/projects/fastd) verwendet. Fastd baut - ähnlich zu l2tp - per Default Verbindungen nur zwischen zu definierten Links auf. Somit ergibt sich keine Redundanz zur batman-adv Topologie-Ermittlung: Für batman-adv existiert ''nicht'' der transitive Abschluss aller konfigurierten fastd-Links als Broadcast-Medium. Das VPN arbeitet hier als Ersatz für ad-hoc wlan Verbindungen: Teile des Netzes zwischen denen keine Verbindungen bestehen, werden über das VPN zusammen gefasst.<br />
Nodes ohne Verbindung zum VPN-Server bilden eine gemeinsames OSI-2 Segment, wenn eine Ad-Hoc Verbindung besteht oder wenn zwischen ihnen eine VPN-Verbindung manuell konfiguriert wurde<br />
(fastd-Peers per Shell im Dateisystem des Nodes hinterlegt). Eine Verbindung zu Super-Nodes ist nicht zwigend erforderlich. Somit gilt:<br />
<br />
''Das VPN verbindet Ad-Hoc Mesh-Partionen - Partionen ohne VPN-Link zu Super-Nodes arbeiten autark.<br />
<br />
==== Schlüsselaustausch ==== <br />
[[Datei:Key-submit.png|thumb|300px|right|Abb. 4]]<br />
Der Schlüsselaustausch erfolgt dabei über die Super-Nodes. Jeder Super-Node betreibt einen RESTful-Webservice über den er Schlüssel entgegen nimmt (https://github.com/ff-kbu/fastd-service): Initiiert ein Node eine VPN-Verbindung zu einem Super-Node zu übermittelt er im Vorfeld seinen Public-Key. Durch die Verwendung Elliptischer Kurven sind die Schlüssel hinreichend klein und können urlencoded übermittelt werden. Abb. 4 zeigt den Schlüsselaustausch zwischen Node und Super-Node. Zusätzlich ist das Node-Register am Austausch beteiligt, dass den Schlüssel ablehen kann (bspw. wenn er bereits im Netz verwendet wird).<br />
<br />
=== Frame-Typen ===<br />
Für die genutzten Frame-Typen gilt:<br />
* vlan-Tagging wird nicht verwendet.<br />
* VPN und ad-hoc: ''batman-adv''-Frames <br />
* Infrastruktur-Netz: Gewöhnliche Wireless-Lan Frames (IEEE 802.11)<br />
<br />
=== MTU / PMTU ===<br />
* wireless-lan interfaces verwenden als MTU 1500 Byte<br />
* fastd tap-Interfaces verwenden als MTU 1426 Byte<br />
<br />
''Hinweise: ''<br />
<br />
fastd-Pakete werden per default nicht fragmentiert. Wird eine VPN-Verbindung mit zu kleiner PMTU verwendet, werden die Pakete verworfen. Die MTU 1426 des fastd-Interfaces errechnet sich durch:<br />
* PMTU des Uplinks: 1500 Byte - 8 Byte = 1492 Byte = MTU einer DSL-PPPoE Verbindung<br />
* Overhead fastd: 1492 Byte - 20 Byte (IP) - 8 Byte (UDP) - 24 Byte (fastd) - 14 Byte (Inner Ethernet) = 1426 Byte<br />
<br />
Falls keine fastd-Verschlüsselung verwendet wird (Method: 'null') rediziert sich der fastd-Overhead von 24 Byte auf 1 Byte.<br />
<br />
Problematisch ist, dass Netcologne bei ADSL typischerweise nur eine PMTU von 1442 (d.h. 50 Byte weniger) zur Verfügung stellt. Hiermit ist fraglich, in wie weit 1426 als MTU für fastd-Interfaces sinnvoll ist (alternativ: 1376). Aktuell werden alle Super-Nodes ohne PMTU-Discovery betrieben (<tt>sysctl -w net.ipv4.ip_no_pmtu_disc=1</tt>), so dass das Don't Fragment (DF)-Bit seitens fastd auf 0 gesetzt wird und keine Probleme durch Paketverlust auftreten. Auf den Nodes ist PMTU-Discovery derzeit aktiv - Probleme sind jedoch nicht erkennbar. Mittelfristig sollte das Fragmentierungsverhalten seitens fastd konfigurierbar sein: https://projects.universe-factory.net/issues/120<br />
<br />
== OSI-3: Network Layer ==<br />
Zur Kommunikation im Freifunk-Netz und mit weiteren Netzen ist es erforderlich, IP-Adressen zu Vergeben und Pakete in andere Netze zu routen. Dieser Absatz beschreibt die verwendete Adressierungs und Routing-Strategien im Freifunk-Netz. Hierbei wird insbesondere auf das Backbon-VPN (Tinc) und auf die Konfigration der Super-Nodes eingangen.<br />
<br />
<br />
=== Adressbereiche ===<br />
Im OSI-2 Segment werden die folgenden Adressen verwendet:<br />
* 172.27.0.0/18 - 172.27.0.0 bis 172.63.255.255, Subnet-Mask: 255.255.192.0<br />
* 2001:67c:20a0:b102::/64<br />
* fdd3:5d16:b5dd::/64<br />
* fdd3:5d16:b5dd:1::/64<br />
<br />
=== Konfiguration Super-Nodes ===<br />
Jeder Super-Node betreibt einen DHCPv4-Server, mit dem er die Konfiguration für die Klienten ausliefert. Gleichzeitig betreibt er einen DNS-Cache - optional ist der Betrieb eines transparenten HTTP-Proxies denkbar.<br />
<br />
Die aktuelle Planung sieht 8 Super-Nodes für das FF-KBU vor, auf denen DHCP-Server betrieben werden. Keys und DNS-Namen sind in der Firmware hinterlegt. Bei Bedarf können weitere Super-Nodes hinzugefügt werden.<br />
<br />
==== IPv4 / DHCP ====<br />
<br />
IPv4-Adressen und DHCP-Ranges können wie folgt aufgeteilt werden. <br />
<br />
{| class="wikitable"<br />
!Name<br />
!Zugewiesenes Subnet <br />
! IP<br />
! DHCP-Range<br />
|-<br />
|fastd1<br />
|172.27.0.0/21<br />
|172.27.0.3<br />
|172.27.0.10 - 172.27.7.254<br />
|-<br />
|fastd3<br />
|172.27.8.0/21<br />
|172.27.8.1<br />
|172.27.8.10 - 172.27.15.254 <br />
|-<br />
|fastd4<br />
|172.27.16.0/21<br />
|172.27.16.1<br />
|172.27.16.10 - 172.27.23.254<br />
|-<br />
|fastd5<br />
|172.27.24.0/21<br />
|172.27.24.1<br />
|172.27.24.10 - 172.27.31.254<br />
|-<br />
|fastd6<br />
|172.27.32.0/21<br />
|172.27.32.1<br />
|172.27.32.10 - 172.27.39.254<br />
|-<br />
|fastd7<br />
|172.27.40.0/21<br />
|172.27.40.1<br />
|172.27.40.10 - 172.27.47.254<br />
|-<br />
|fastd8<br />
|172.27.48.0/21<br />
|172.27.48.1<br />
|172.27.48.10 - 172.27.55.254<br />
|-<br />
|fastd2<br />
|172.27.56.0/21<br />
|172.27.56.1<br />
|172.27.56.10 - 172.27.63.254<br />
|}<br />
<br />
Hinweis: Werden weitere Super-Nodes benötigt, so müssen die zugewiesenen subnets aufgeteilt werden.<br />
<br />
=== Konfiguration Nodes ===<br />
''<todo> (TODO: Implementierung in der Firmware ausstehend).''<br />
<br />
Nodes verwenden im Uplink-Netz zusätzlich den ULA-Bereich<br />
*fdd3:5d16:b5dd:1::/64 <br />
Jeder Node kann über seine Public-IPv6, ULA-IPv6, Link-Local-IPv6 Adressen und die IPv4-Adresse seines WAN-Uplink-Netzes erreicht werden. Jedem Node wird dadurch eine eindeutige Adresse aus fdd3:5d16:b5dd::/64 zugewiesen, die aus allen Netzen - mit denen er verbunden ist erreicht werden kann <br />
<br />
Gleichzeitig verwendet jeder Node die anycast-Adresse 172.27.0.255, die nur aus dem Infrastruktur-Netz erreichbar ist. Hierdurch kann ein Client explizit abfragen, mit welchem Node er verbunden ist. </todo><br />
<br />
=== IPv6 / RADVD ===<br />
Hinweis: Aktell nicht so umgesetzt - Tinc in Squeeze hat da afair Probleme TODO: Umsetzen.<br />
Super-Nodes betreiben radvd-Server im Adressbereich 2001:67c:20a0:b102::/64 und annoncen sich selbst als Router</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2263
IP Subnetze
2013-03-25T20:44:42Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
==== IPv4 / DHCP ====<br />
<br />
IPv4-Adressen und DHCP-Ranges können wie folgt aufgeteilt werden. <br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
!Name<br />
!Zugewiesenes Subnetz<br />
! IP<br />
! DHCP-Range<br />
! Kommentar<br />
! Kontakt<br />
|-<br />
|fastd1<br />
|172.27.0.0/21<br />
|172.27.0.3<br />
|172.27.0.10 - 172.27.7.254<br />
|na<br />
|<br />
|-<br />
|fastd3<br />
|172.27.8.0/21<br />
|172.27.8.1<br />
|172.27.8.10 - 172.27.15.254 <br />
|<br />
|[[User:Yanosz|Yanosz]]<br />
|-<br />
|fastd4<br />
|172.27.16.0/21<br />
|172.27.16.1<br />
|172.27.16.10 - 172.27.23.254<br />
|Testbetrieb<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|fastd5<br />
|172.27.24.0/21<br />
|172.27.24.1<br />
|172.27.24.10 - 172.27.31.254<br />
|na<br />
|<br />
|-<br />
|fastd6<br />
|172.27.32.0/21<br />
|172.27.32.1<br />
|172.27.32.10 - 172.27.39.254<br />
|na<br />
|<br />
|-<br />
|fastd7<br />
|172.27.40.0/21<br />
|172.27.40.1<br />
|172.27.40.10 - 172.27.47.254<br />
|na<br />
|<br />
|-<br />
|fastd8<br />
|172.27.48.0/21<br />
|172.27.48.1<br />
|172.27.48.10 - 172.27.55.254<br />
|na<br />
|<br />
|-<br />
|fastd2<br />
|172.27.56.0/21<br />
|172.27.56.1<br />
|172.27.56.10 - 172.27.63.254<br />
|<br />
|<br />
|-<br />
|}<br />
<br />
==== IPv4 / tinc -Backbone ====<br />
<br />
172.27.255.0/24<br />
<br />
public-keys: [https://github.com/ff-kbu/bbkeys| bbkeys]<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! IP<br />
! Name<br />
! Funktion/Komentar<br />
! Kontakt<br />
|-<br />
|172.27.255.1<br />
|paula.kbu.freifunk.net<br />
|dns ?<br />
|<br />
|-<br />
|172.27.255.2<br />
|paula.kbu.freifunk.net<br />
|www ?<br />
|<br />
|-<br />
|172.27.255.3<br />
|paul.kbu.freifunk.net<br />
|exit-gw<br />
|<br />
|-<br />
|172.27.255.4<br />
|felicitas.kbu.freifunk.net<br />
|<br />
|<br />
|-<br />
|172.27.255.5<br />
|kif.kbu.freifunk.net<br />
|<br />
|<br />
|-<br />
|172.27.255.6<br />
|collectd.kbu.freifunk.net<br />
|<br />
|<br />
|-<br />
|172.27.255.7<br />
|jenkins.kbu.freifunk.net<br />
|build-server<br />
|<br />
|-<br />
|172.27.255.8<br />
|backup.kbu.freifunk.net<br />
|backup<br />
|<br />
|-<br />
|172.27.255.9<br />
|fastd3.kbu.freifunk.net<br />
|fastd<br />
|<br />
|-<br />
|172.27.255.10<br />
|fastd4.kbu.freifunk.net<br />
|fastd<br />
|<br />
|-<br />
|172.27.255.11<br />
|lucifer.kbu.freifunk.net<br />
|<br />
|<br />
|-<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2262
IP Subnetze
2013-03-25T20:34:04Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
==== IPv4 / DHCP ====<br />
<br />
IPv4-Adressen und DHCP-Ranges können wie folgt aufgeteilt werden. <br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
!Name<br />
!Zugewiesenes Subnetz<br />
! IP<br />
! DHCP-Range<br />
! Kommentar<br />
! Kontakt<br />
|-<br />
|fastd1<br />
|172.27.0.0/21<br />
|172.27.0.3<br />
|172.27.0.10 - 172.27.7.254<br />
|na<br />
|<br />
|-<br />
|fastd3<br />
|172.27.8.0/21<br />
|172.27.8.1<br />
|172.27.8.10 - 172.27.15.254 <br />
|<br />
|[[User:Yanosz|Yanosz]]<br />
|-<br />
|fastd4<br />
|172.27.16.0/21<br />
|172.27.16.1<br />
|172.27.16.10 - 172.27.23.254<br />
|Testbetrieb<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|fastd5<br />
|172.27.24.0/21<br />
|172.27.24.1<br />
|172.27.24.10 - 172.27.31.254<br />
|na<br />
|<br />
|-<br />
|fastd6<br />
|172.27.32.0/21<br />
|172.27.32.1<br />
|172.27.32.10 - 172.27.39.254<br />
|na<br />
|<br />
|-<br />
|fastd7<br />
|172.27.40.0/21<br />
|172.27.40.1<br />
|172.27.40.10 - 172.27.47.254<br />
|na<br />
|<br />
|-<br />
|fastd8<br />
|172.27.48.0/21<br />
|172.27.48.1<br />
|172.27.48.10 - 172.27.55.254<br />
|na<br />
|<br />
|-<br />
|fastd2<br />
|172.27.56.0/21<br />
|172.27.56.1<br />
|172.27.56.10 - 172.27.63.254<br />
|<br />
|<br />
|-<br />
|}<br />
<br />
ipv4 tinc -Backbone 172.27.255.0/24, public-keys: [https://github.com/ff-kbu/bbkeys| bbkeys]<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! IP<br />
! Name<br />
! Funktion/Komentar<br />
! Kontakt<br />
|-<br />
|172.27.255.1<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.2<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.3<br />
|paul.kbu.freifunk.net<br />
|exit-gw<br />
|<br />
|-<br />
|172.27.255.4<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.5<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.6<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.7<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.8<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.9<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.10<br />
|fastd4<br />
|supernode<br />
|<br />
|-<br />
|172.27.255.11<br />
|<br />
|online<br />
|<br />
|-<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2261
IP Subnetze
2013-03-25T20:31:09Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
==== IPv4 / DHCP ====<br />
<br />
IPv4-Adressen und DHCP-Ranges können wie folgt aufgeteilt werden. <br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
!Name<br />
!Zugewiesenes Subnetz<br />
! IP<br />
! DHCP-Range<br />
! Kommentar<br />
! Kontakt<br />
|-<br />
|fastd1<br />
|172.27.0.0/21<br />
|172.27.0.3<br />
|172.27.0.10 - 172.27.7.254<br />
|na<br />
|<br />
|-<br />
|fastd3<br />
|172.27.8.0/21<br />
|172.27.8.1<br />
|172.27.8.10 - 172.27.15.254 <br />
|<br />
|[[User:Yanosz|Yanosz]]<br />
|-<br />
|fastd4<br />
|172.27.16.0/21<br />
|172.27.16.1<br />
|172.27.16.10 - 172.27.23.254<br />
|Testbetrieb<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|fastd5<br />
|172.27.24.0/21<br />
|172.27.24.1<br />
|172.27.24.10 - 172.27.31.254<br />
|na<br />
|<br />
|-<br />
|fastd6<br />
|172.27.32.0/21<br />
|172.27.32.1<br />
|172.27.32.10 - 172.27.39.254<br />
|na<br />
|<br />
|-<br />
|fastd7<br />
|172.27.40.0/21<br />
|172.27.40.1<br />
|172.27.40.10 - 172.27.47.254<br />
|na<br />
|<br />
|-<br />
|fastd8<br />
|172.27.48.0/21<br />
|172.27.48.1<br />
|172.27.48.10 - 172.27.55.254<br />
|na<br />
|<br />
|-<br />
|fastd2<br />
|172.27.56.0/21<br />
|172.27.56.1<br />
|172.27.56.10 - 172.27.63.254<br />
|<br />
|<br />
|-<br />
|}<br />
<br />
ipv4 tinc -Backbone 172.27.255.0/24<br />
<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! IP<br />
! Name<br />
! Funktion/Komentar<br />
! Kontakt<br />
|-<br />
|172.27.255.1<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.2<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.3<br />
|paul.kbu.freifunk.net<br />
|exit-gw<br />
|<br />
|-<br />
|172.27.255.4<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.5<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.6<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.7<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.8<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.9<br />
|<br />
|online<br />
|<br />
|-<br />
|172.27.255.10<br />
|fastd4<br />
|supernode<br />
|<br />
|-<br />
|172.27.255.11<br />
|<br />
|online<br />
|<br />
|-<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2260
IP Subnetze
2013-03-25T20:09:59Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
==== IPv4 / DHCP ====<br />
<br />
IPv4-Adressen und DHCP-Ranges können wie folgt aufgeteilt werden. <br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
!Name<br />
!Zugewiesenes Subnet <br />
! IP<br />
! DHCP-Range<br />
! Kontakt<br />
|-<br />
|fastd1<br />
|172.27.0.0/21<br />
|172.27.0.3<br />
|172.27.0.10 - 172.27.7.254<br />
|<br />
|-<br />
|fastd3<br />
|172.27.8.0/21<br />
|172.27.8.1<br />
|172.27.8.10 - 172.27.15.254 <br />
|<br />
|-<br />
|fastd4<br />
|172.27.16.0/21<br />
|172.27.16.1<br />
|172.27.16.10 - 172.27.23.254<br />
|<br />
|-<br />
|fastd5<br />
|172.27.24.0/21<br />
|172.27.24.1<br />
|172.27.24.10 - 172.27.31.254<br />
|<br />
|-<br />
|fastd6<br />
|172.27.32.0/21<br />
|172.27.32.1<br />
|172.27.32.10 - 172.27.39.254<br />
|<br />
|-<br />
|fastd7<br />
|172.27.40.0/21<br />
|172.27.40.1<br />
|172.27.40.10 - 172.27.47.254<br />
|<br />
|-<br />
|fastd8<br />
|172.27.48.0/21<br />
|172.27.48.1<br />
|172.27.48.10 - 172.27.55.254<br />
|<br />
|-<br />
|fastd2<br />
|172.27.56.0/21<br />
|172.27.56.1<br />
|172.27.56.10 - 172.27.63.254<br />
|}<br />
<br />
<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|derzeit nicht funktionsfähig, stand, 21.03.2013<br />
|<br />
|-<br />
|172.27.56.0 /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|fastd4.kbu.freifunk.net, DHCP<br />
|15-03-2013<br />
|Testknoten, dns noch nicht eingetragen<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|172.27.255.0/24<br />
|Tinc-BackboneVPN<br />
|<br />
|<br />
|<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2204
IP Subnetze
2013-03-21T18:19:41Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|derzeit nicht funktionsfähig, stand, 21.03.2013<br />
|<br />
|-<br />
|172.27.56.0 /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|fastd4.kbu.freifunk.net, DHCP<br />
|15-03-2013<br />
|Testknoten, dns noch nicht eingetragen<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|172.27.255.0/24<br />
|Tinc-BackboneVPN<br />
|<br />
|<br />
|<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2203
IP Subnetze
2013-03-21T18:16:04Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|derzeit nicht funktionsfähig, stand, 21.03.2013<br />
|<br />
|-<br />
|172.27.56.0 /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|?, DHCP<br />
|15-03-2013<br />
|Testknoten<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|172.27.255.0/24<br />
|Tinc-BackboneVPN<br />
|<br />
|<br />
|<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2202
IP Subnetze
2013-03-21T17:29:40Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|derzeit nicht funktionsfähig, stand, 21.03.2013<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|?, DHCP<br />
|15-03-2013<br />
|Testknoten<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|172.27.255.0/24<br />
|Tinc-BackboneVPN<br />
|<br />
|<br />
|<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2146
IP Subnetze
2013-03-17T18:26:19Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|?, DHCP<br />
|15-03-2013<br />
|Testknoten<br />
|[[User:Hundfred|Hundfred]]<br />
|-<br />
|172.27.255.0/24<br />
|Tinc-BackboneVPN<br />
|<br />
|<br />
|<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Kategorie:Infrastruktur&diff=2138
Kategorie:Infrastruktur
2013-03-16T14:03:58Z
<p>Hundfred: </p>
<hr />
<div>Zur Infrastruktur von Freifunk-KBU gehören verschiedene Server<br />
{| class="wikitable"<br />
! Name<br />
! DNS-Namen<br />
! IP-Adressen<br />
! Funktion<br />
! Kommentar<br />
|-<br />
|Paul<br />
|paul.kbu.freifunk.net<br />
|<br />
*195.54.164.202<br />
|Xen-Dom0 im RZ<br />
|<br />
<br />
|-<br />
|Felix<br />
|felix.kbu.freifunk.net, vpn1.kbu.freifunk.net<br />
|<br />
*172.26.0.1 (mesh)<br />
|VPN-Gateway im STW, DNS, DHCP, Tinc-CA (http://felix.kbu.freifunk.net:8080/ff-serv)<br />
| Kein Exit<br />
<br />
|-<br />
|Felicitas<br />
|felicitas.kbu.freifunk.net, vpn2.kbu.freifunk.net<br />
|<br />
* 172.26.0.2 (mesh)<br />
* 195.54.164.203 (Public)<br />
|VPN-Gateway im RZ, Exit<br />
|<br />
<br />
|-<br />
|Jenkins<br />
|jenkins.kbu.freifunk.net<br />
|<br />
* (nur interne)<br />
|CI-/ Build-Server (http://jenkins.kbu.freifunk.net)<br />
|<br />
<br />
|-<br />
|Freifunk<br />
|kbu.freifunk.net<br />
|<br />
*212.201.68.130<br />
|VM-Host für Felix, Wiki, Webpage<br />
|<br />
<br />
|-<br />
|Backup<br />
|backup.kbu.freifunk.net<br />
|<br />
* 2001:470:780f:1::2<br />
| Backup, Icinga<br />
| nur Backup und Monitoring<br />
<br />
|}<br />
<br />
[[IP Subnetze]]<br />
<br />
'''DNS *.kbu.freifunk.net'''<br />
<br />
Ansprechpartner für die Administration des DNS, für die Domain *.kbu.freifunk.net sind:<br />
[[User:Yanosz|Yanosz]]<br />
<br />
<br />
<br />
<br />
[[Kategorie:internes]]</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Kategorie:Infrastruktur&diff=2137
Kategorie:Infrastruktur
2013-03-16T13:56:02Z
<p>Hundfred: </p>
<hr />
<div>Zur Infrastruktur von Freifunk-KBU gehören verschiedene Server<br />
{| class="wikitable"<br />
! Name<br />
! DNS-Namen<br />
! IP-Adressen<br />
! Funktion<br />
! Kommentar<br />
|-<br />
|Paul<br />
|paul.kbu.freifunk.net<br />
|<br />
*195.54.164.202<br />
|Xen-Dom0 im RZ<br />
|<br />
<br />
|-<br />
|Felix<br />
|felix.kbu.freifunk.net, vpn1.kbu.freifunk.net<br />
|<br />
*172.26.0.1 (mesh)<br />
|VPN-Gateway im STW, DNS, DHCP, Tinc-CA (http://felix.kbu.freifunk.net:8080/ff-serv)<br />
| Kein Exit<br />
<br />
|-<br />
|Felicitas<br />
|felicitas.kbu.freifunk.net, vpn2.kbu.freifunk.net<br />
|<br />
* 172.26.0.2 (mesh)<br />
* 195.54.164.203 (Public)<br />
|VPN-Gateway im RZ, Exit<br />
|<br />
<br />
|-<br />
|Jenkins<br />
|jenkins.kbu.freifunk.net<br />
|<br />
* (nur interne)<br />
|CI-/ Build-Server (http://jenkins.kbu.freifunk.net)<br />
|<br />
<br />
|-<br />
|Freifunk<br />
|kbu.freifunk.net<br />
|<br />
*212.201.68.130<br />
|VM-Host für Felix, Wiki, Webpage<br />
|<br />
<br />
|-<br />
|Backup<br />
|backup.kbu.freifunk.net<br />
|<br />
* 2001:470:780f:1::2<br />
| Backup, Icinga<br />
| nur Backup und Monitoring<br />
<br />
|}<br />
<br />
[[IP Subnetze]]<br />
<br />
'''DNS *.kbu.freifunk.net'''<br />
<br />
Ansprechpartner für die Administration des DNS, für die domain *.kbu.freifunk.net sind:<br />
[[User:Yanosz|Yanosz]]<br />
<br />
<br />
<br />
<br />
[[Kategorie:internes]]</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2134
IP Subnetze
2013-03-16T10:47:54Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|?, DHCP<br />
|15-03-2013<br />
|Testknoten<br />
|[[User:Hundfred|Hundfred]]<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2133
IP Subnetze
2013-03-16T10:47:28Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{| class="wikitable sortable"<br />
|- bgcolor="#efefef"<br />
! Subnetz<br />
! verwendet für<br />
! belegt seit<br />
! Bemerkungen<br />
! Kontakt<br />
|-<br />
|172.27. /21<br />
|fastd1.kbu.freifunk.net, DCHP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd2.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27. /21<br />
|fastd3.kbu.freifunk.net, DHCP<br />
|<br />
|<br />
|<br />
|-<br />
|172.27.16.0/21<br />
|?, DHCP<br />
|<br />
|Testknoten<br />
|[[User:Hundfred|Hundfred]]<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2132
IP Subnetze
2013-03-16T09:53:01Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{|<br />
|+<br />
!Subnetze<br />
fastd1.kbu.freifunk.net<br />
|-<br />
fastd1.kbu.freifunk.net<br />
|-<br />
fastd1.kbu.freifunk.net<br />
|-<br />
fastd1.kbu.freifunk.net<br />
<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2131
IP Subnetze
2013-03-16T09:50:39Z
<p>Hundfred: </p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.<br />
<br />
{|<br />
!Subnetze!<br />
fastd1.kbu.freifunk.net<br />
|+<br />
fastd1.kbu.freifunk.net<br />
|+<br />
fastd1.kbu.freifunk.net<br />
|+<br />
fastd1.kbu.freifunk.net<br />
<br />
|}</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Benutzer:Hundfred&diff=2130
Benutzer:Hundfred
2013-03-15T15:45:51Z
<p>Hundfred: Die Seite wurde neu angelegt: „hundfred at s23.org“</p>
<hr />
<div>hundfred at s23.org</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IP_Subnetze&diff=2129
IP Subnetze
2013-03-15T15:44:21Z
<p>Hundfred: Die Seite wurde neu angelegt: „ == IP-Subnetze == Für den Köln-Bonner Raum ist das folgende Subnetz reserviert: '172.26.0.0/15 ' Und ist hier eingetragen: http://wiki.freifunk.net/IP-Ne…“</p>
<hr />
<div><br />
== IP-Subnetze ==<br />
<br />
Für den Köln-Bonner Raum ist das folgende Subnetz reserviert:<br />
<br />
'172.26.0.0/15 '<br />
<br />
Und ist hier eingetragen: http://wiki.freifunk.net/IP-Netze.</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Kategorie:Infrastruktur&diff=2128
Kategorie:Infrastruktur
2013-03-15T15:40:11Z
<p>Hundfred: </p>
<hr />
<div>Zur Infrastruktur von Freifunk-KBU gehören verschiedene Server<br />
{| class="wikitable"<br />
! Name<br />
! DNS-Namen<br />
! IP-Adressen<br />
! Funktion<br />
! Kommentar<br />
|-<br />
|Paul<br />
|paul.kbu.freifunk.net<br />
|<br />
*195.54.164.202<br />
|Xen-Dom0 im RZ<br />
|<br />
<br />
|-<br />
|Felix<br />
|felix.kbu.freifunk.net, vpn1.kbu.freifunk.net<br />
|<br />
*172.26.0.1 (mesh)<br />
|VPN-Gateway im STW, DNS, DHCP, Tinc-CA (http://felix.kbu.freifunk.net:8080/ff-serv)<br />
| Kein Exit<br />
<br />
|-<br />
|Felicitas<br />
|felicitas.kbu.freifunk.net, vpn2.kbu.freifunk.net<br />
|<br />
* 172.26.0.2 (mesh)<br />
* 195.54.164.203 (Public)<br />
|VPN-Gateway im RZ, Exit<br />
|<br />
<br />
|-<br />
|Jenkins<br />
|jenkins.kbu.freifunk.net<br />
|<br />
* (nur interne)<br />
|CI-/ Build-Server (http://jenkins.kbu.freifunk.net)<br />
|<br />
<br />
|-<br />
|Freifunk<br />
|kbu.freifunk.net<br />
|<br />
*212.201.68.130<br />
|VM-Host für Felix, Wiki, Webpage<br />
|<br />
<br />
|-<br />
|Backup<br />
|backup.kbu.freifunk.net<br />
|<br />
* 2001:470:780f:1::2<br />
| Backup, Icinga<br />
| nur Backup und Monitoring<br />
<br />
|}<br />
<br />
[[IP Subnetze]]<br />
<br />
<br />
<br />
<br />
[[Kategorie:internes]]</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Kategorie:Infrastruktur&diff=2127
Kategorie:Infrastruktur
2013-03-15T15:39:53Z
<p>Hundfred: </p>
<hr />
<div>Zur Infrastruktur von Freifunk-KBU gehören verschiedene Server<br />
{| class="wikitable"<br />
! Name<br />
! DNS-Namen<br />
! IP-Adressen<br />
! Funktion<br />
! Kommentar<br />
|-<br />
|Paul<br />
|paul.kbu.freifunk.net<br />
|<br />
*195.54.164.202<br />
|Xen-Dom0 im RZ<br />
|<br />
<br />
|-<br />
|Felix<br />
|felix.kbu.freifunk.net, vpn1.kbu.freifunk.net<br />
|<br />
*172.26.0.1 (mesh)<br />
|VPN-Gateway im STW, DNS, DHCP, Tinc-CA (http://felix.kbu.freifunk.net:8080/ff-serv)<br />
| Kein Exit<br />
<br />
|-<br />
|Felicitas<br />
|felicitas.kbu.freifunk.net, vpn2.kbu.freifunk.net<br />
|<br />
* 172.26.0.2 (mesh)<br />
* 195.54.164.203 (Public)<br />
|VPN-Gateway im RZ, Exit<br />
|<br />
<br />
|-<br />
|Jenkins<br />
|jenkins.kbu.freifunk.net<br />
|<br />
* (nur interne)<br />
|CI-/ Build-Server (http://jenkins.kbu.freifunk.net)<br />
|<br />
<br />
|-<br />
|Freifunk<br />
|kbu.freifunk.net<br />
|<br />
*212.201.68.130<br />
|VM-Host für Felix, Wiki, Webpage<br />
|<br />
<br />
|-<br />
|Backup<br />
|backup.kbu.freifunk.net<br />
|<br />
* 2001:470:780f:1::2<br />
| Backup, Icinga<br />
| nur Backup und Monitoring<br />
<br />
|}<br />
<br />
[IP Subnetze]<br />
<br />
<br />
<br />
<br />
[[Kategorie:internes]]</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Kategorie:Infrastruktur&diff=2126
Kategorie:Infrastruktur
2013-03-15T15:36:47Z
<p>Hundfred: </p>
<hr />
<div>Zur Infrastruktur von Freifunk-KBU gehören verschiedene Server<br />
{| class="wikitable"<br />
! Name<br />
! DNS-Namen<br />
! IP-Adressen<br />
! Funktion<br />
! Kommentar<br />
|-<br />
|Paul<br />
|paul.kbu.freifunk.net<br />
|<br />
*195.54.164.202<br />
|Xen-Dom0 im RZ<br />
|<br />
<br />
|-<br />
|Felix<br />
|felix.kbu.freifunk.net, vpn1.kbu.freifunk.net<br />
|<br />
*172.26.0.1 (mesh)<br />
|VPN-Gateway im STW, DNS, DHCP, Tinc-CA (http://felix.kbu.freifunk.net:8080/ff-serv)<br />
| Kein Exit<br />
<br />
|-<br />
|Felicitas<br />
|felicitas.kbu.freifunk.net, vpn2.kbu.freifunk.net<br />
|<br />
* 172.26.0.2 (mesh)<br />
* 195.54.164.203 (Public)<br />
|VPN-Gateway im RZ, Exit<br />
|<br />
<br />
|-<br />
|Jenkins<br />
|jenkins.kbu.freifunk.net<br />
|<br />
* (nur interne)<br />
|CI-/ Build-Server (http://jenkins.kbu.freifunk.net)<br />
|<br />
<br />
|-<br />
|Freifunk<br />
|kbu.freifunk.net<br />
|<br />
*212.201.68.130<br />
|VM-Host für Felix, Wiki, Webpage<br />
|<br />
<br />
|-<br />
|Backup<br />
|backup.kbu.freifunk.net<br />
|<br />
* 2001:470:780f:1::2<br />
| Backup, Icinga<br />
| nur Backup und Monitoring<br />
<br />
|}<br />
<br />
[[IP Subnetze]]<br />
<br />
[[Kategorie:internes]]</div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=Vorlage:Treffen&diff=2118
Vorlage:Treffen
2013-03-10T20:45:56Z
<p>Hundfred: </p>
<hr />
<div><br /><br />
{{textfeld01<br />
|title=[[Treffen | Die nächsten Treffen:]]<br />
|id="naechste-treffen"<br />
|content=<br />
<div><br />
* {{{termin-c4}}} im [http://koeln.ccc.de C4] in Köln, [http://www.koeln.ccc.de/c4/faq/index.xml#anreise Helios Str. 6a], '''20:00''' Uhr<br />
''Hinweis'': Der Netzladen ist umgezogen - Eingang: <br /> Weiße Tür rechts neben dem Buchladen, links neben dem Maya<br />
</div><br />
}}<br />
<noinclude><br />
<br />
'''Anwendung:'''<br />
<br />
<nowiki>{{treffen |termin-bn=<DATUM> |termin-c4=<DATUM>}}</nowiki><br />
<br />
<br />
[[Kategorie:Vorlagen]]<br />
<br />
</noinclude></div>
Hundfred
https://kbu.freifunk.net/wiki/index.php?title=IRC&diff=2076
IRC
2013-02-24T22:02:40Z
<p>Hundfred: </p>
<hr />
<div>Seit kurzem verwenden wir einen IRC-Channel. Mit etwas Glück können wir Dir bei Problemen direkt helfen.<br />
<br />
Solltest Du IRC nicht nicht kennen, hilft Wikipedia: http://de.wikipedia.org/wiki/Internet_Relay_Chat<br />
<br />
Server (ipv4): irc.paranode.net<br />
Server (ipv6): irc6.paranode.net <br />
<br />
Channel: #ff-kbu<br />
<br />
Port: 6667, oder 6697 SSL<br />
<br />
<br />
[[Kategorie:Kontakt]]</div>
Hundfred