Supernode: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Keine Bearbeitungszusammenfassung |
Keine Bearbeitungszusammenfassung |
||
Zeile 1: | Zeile 1: | ||
[[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]] | [[https://en.wikipedia.org/wiki/Supernode_%28networking%29 wikipedia-article]] | ||
i don't like that word, | |||
quick'n dirty | quick'n dirty | ||
Zeile 66: | Zeile 67: | ||
</pre> | </pre> | ||
[[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] | [[https://github.com/ff-kbu/fff/tree/v0.3-generic/files/lib/freifunk/mesh-vpn/backbone fastd-backbone]] for more | ||
fastd.conf | |||
<pre> | |||
# Log everything to a log file | |||
log to "/var/log/fastd.log" level debug; | |||
# Set the interface name | |||
interface "fastd"; | |||
# Support xsalsa20 and aes128 encryption methods, prefer xsalsa20 | |||
method "xsalsa20-poly1305"; | |||
method "aes128-gcm"; | |||
method "null"; #todo: WTF, encryption is off!?, what do we change keys for? | |||
# Bind to a fixed port, IPv4 only | |||
bind 0.0.0.0:10000; | |||
# Secret key generated by `fastd --generate-key` | |||
# in this case you have to ask the holy guru of that project for the private key' | |||
secret "won't tell my secret here"; | |||
# Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE) | |||
# (see MTU selection documentation) | |||
mtu 1426; | |||
# Include peers from the directory 'peers' | |||
include peers from "/etc/fastd/kbu/backbone"; | |||
include peers from "/etc/fastd/kbu/peers"; | |||
#ipadress, routing | |||
#establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script | |||
<pre> |
Version vom 29. März 2013, 10:51 Uhr
[wikipedia-article] i don't like that word,
quick'n dirty required software:
1) [fastd] mesh-node-vpn
2) [vpn-key-upload] todo: remove overhead (apache,ruby,sinatra ...), kiss principle]
3) [batman-adv]
4) [tinc] mesh-backbone-vpn
5) OS: debian wheezy
load batman-adv kernel while booting
in /etc/modules.conf add
batman-adv
disable pmtu-discovery in /etc/sysctl.conf add
net.ipv4.ip_no_pmtu_disc=1
fastd
in /etc/apt/apt/sources.list add
deb http://repo.universe-factory.net/debian/ sid main
keyimport
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8 gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -
install fastd
apt-get update apt-get install fastd
fast configuration
/etc/fastd/kbu# ls backbone fastd.conf peers root@fastd4:/etc/fastd/kbu# ls backbone/ fastd1 fastd2 fastd3 fastd4 root@fastd4:/etc/fastd/kbu# cat backbone/* key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59"; remote ipv4 "fastd1.kbu.freifunk.net" port 10000; key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10"; remote ipv4 "fastd2.kbu.freifunk.net" port 10000; key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0"; remote ipv4 "fastd3.kbu.freifunk.net" port 10000; key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621"; remote ipv4 "fastd1.kbu.freifunk.net" port 10000;
[fastd-backbone] for more
fastd.conf
# Log everything to a log file log to "/var/log/fastd.log" level debug; # Set the interface name interface "fastd"; # Support xsalsa20 and aes128 encryption methods, prefer xsalsa20 method "xsalsa20-poly1305"; method "aes128-gcm"; method "null"; #todo: WTF, encryption is off!?, what do we change keys for? # Bind to a fixed port, IPv4 only bind 0.0.0.0:10000; # Secret key generated by `fastd --generate-key` # in this case you have to ask the holy guru of that project for the private key' secret "won't tell my secret here"; # Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE) # (see MTU selection documentation) mtu 1426; # Include peers from the directory 'peers' include peers from "/etc/fastd/kbu/backbone"; include peers from "/etc/fastd/kbu/peers"; #ipadress, routing #establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script