Supernode
Version vom 29. März 2013, 10:51 Uhr von Hundfred (Diskussion | Beiträge)
[wikipedia-article] i don't like that word,
quick'n dirty required software:
1) [fastd] mesh-node-vpn
2) [vpn-key-upload] todo: remove overhead (apache,ruby,sinatra ...), kiss principle]
3) [batman-adv]
4) [tinc] mesh-backbone-vpn
5) OS: debian wheezy
load batman-adv kernel while booting
in /etc/modules.conf add
batman-adv
disable pmtu-discovery in /etc/sysctl.conf add
net.ipv4.ip_no_pmtu_disc=1
fastd
in /etc/apt/apt/sources.list add
deb http://repo.universe-factory.net/debian/ sid main
keyimport
gpg --keyserver pgpkeys.mit.edu --recv-key AB7A88C5B89033D8 gpg -a --export AB7A88C5B89033D8 | sudo apt-key add -
install fastd
apt-get update apt-get install fastd
fast configuration
/etc/fastd/kbu# ls backbone fastd.conf peers root@fastd4:/etc/fastd/kbu# ls backbone/ fastd1 fastd2 fastd3 fastd4 root@fastd4:/etc/fastd/kbu# cat backbone/* key "4f856d95bd596ac7724edca73a19e6e9d142b374df27166bb1a78e58785efc59"; remote ipv4 "fastd1.kbu.freifunk.net" port 10000; key "e1916b66c4f8a795e217877cf72607d952e796463c7024dd9a6a47ae2929bc10"; remote ipv4 "fastd2.kbu.freifunk.net" port 10000; key "d56181dfe9b5ac7cfe68a94c0ce406322a9924286a751673da0dcb28ad5218b0"; remote ipv4 "fastd3.kbu.freifunk.net" port 10000; key "9b3f65f99963343e2785c8c4fad65e70b73ee7e1205d63bd84f3e2decb53e621"; remote ipv4 "fastd1.kbu.freifunk.net" port 10000;
[fastd-backbone] for more
fastd.conf
# Log everything to a log file log to "/var/log/fastd.log" level debug; # Set the interface name interface "fastd"; # Support xsalsa20 and aes128 encryption methods, prefer xsalsa20 method "xsalsa20-poly1305"; method "aes128-gcm"; method "null"; #todo: WTF, encryption is off!?, what do we change keys for? # Bind to a fixed port, IPv4 only bind 0.0.0.0:10000; # Secret key generated by `fastd --generate-key` # in this case you have to ask the holy guru of that project for the private key' secret "won't tell my secret here"; # Set the interface MTU for TAP mode with xsalsa20/aes128 over IPv4 with a base MTU of 1492 (PPPoE) # (see MTU selection documentation) mtu 1426; # Include peers from the directory 'peers' include peers from "/etc/fastd/kbu/backbone"; include peers from "/etc/fastd/kbu/peers"; #ipadress, routing #establish "/root/scripts/fastdup.sh"; #does'not work for me, need to do so in an external script