Kuburitswa kwereferensi yekumisikidzwa kweYggdrasil 0.4 protocol kwakabudiswa, izvo zvinokutendera kuti utumire yakaparadzana yakasarudzika yakavanzika IPv6 network pamusoro peyakajairika network yepasirese, iyo inoshandisa yekupedzisira-kusvika-kumagumo encryption kuchengetedza zvakavanzika. Chero maapplication aripo anotsigira IPv6 anogona kushandiswa kushanda kuburikidza neYggdrasil network. Kuitwa kwacho kwakanyorwa muGo uye kugoverwa pasi pe LGPLv3 rezinesi. Linux, Windows, macOS, FreeBSD, OpenBSD uye Ubiquiti EdgeRouter mapuratifomu anotsigirwa.
Yggdrasil iri kugadzira pfungwa nyowani yekugadzira dhizaini yepasirese, node umo inokwanisa kubatana zvakananga kune mesh network modhi (semuenzaniso, kuburikidza neWi-Fi kana Bluetooth), kana kupindirana pane iripo IPv6 kana IPv4 network (network pa. pamusoro pe network). Chinhu chakasiyana cheYggdrasil ndiko kurongeka kwebasa, pasina chikonzero chekugadzirisa zvakajeka nzira - ruzivo pamusoro pemigwagwa inoverengwa zvichienderana nenzvimbo yenode mune network maererano nedzimwe node. Zvishandiso zvinogadziriswa kuburikidza neyenguva dzose IPv6 kero, iyo isingachinji kana node ikafamba (Yggdrasil inoshandisa iyo isina kushandiswa kero renji 0200::/7).
Iyo yese Yggdrasil network haionekwe semuunganidzwa weakasiyana subnetworks, asi semuti mumwechete wakarongeka wakatenderera une "mudzi" mumwechete uye node imwe neimwe ine mubereki mumwe chete kana vana vakawanda. Chimiro chakadaro chemuti chinokubvumira kuti uvake nzira inoenda kunzvimbo yekuenda, inoenderana neiyo sosi node, uchishandisa iyo "locator" mashandiro, iyo inosarudza nzira yakakwana kune node kubva pamudzi.
Ruzivo rwemiti runogoverwa pakati pemanodhi uye haruna kuchengetwa pakati. Kuchinjana ruzivo rwekufambisa, tafura yehashi yakagoverwa (DHT) inoshandiswa, iyo node inogona kutora ruzivo rwese pamusoro penzira kune imwe node. Iyo network pachayo inopa chete kumagumo-kusvika-kumagumo encryption (manodhi ekufambisa haagone kuona zvirimo), asi kwete kusazivikanwa (kana yakabatana neInternet, vezera avo vanodyidzana zvakanangana navo vanogona kuona iyo chaiyo IP kero, saka pakusazivikanwa ndeye. inokurudzirwa kubatanidza node kuburikidza neTor kana I2P).
Zvinocherechedzwa kuti kunyangwe purojekiti iri padanho rekusimudzira alpha, yakatogadzikana zvakakwana kuti ishandiswe zuva nezuva, asi haivimbisi kuenderana kwekudzokera pakati pekuburitswa. YeYggdrasil 0.4, nharaunda inotsigira seti yemasevhisi, kusanganisira chikuva chekutambira Linux midziyo yekutambira masaiti avo, iyo YaCy yekutsvaga injini, Matrix yekutaurirana server, IRC server, DNS, VoIP system, BitTorrent tracker, mepu yekubatanidza, IPFS gedhi. uye proxy yekuwana Tor, I2P uye clearnet network.
Mushanduro itsva:
- Chirongwa chitsva chekufambisa chaitwa chisingaenderane neyakapfuura Yggdrasil kuburitswa.
- Kana uchimisikidza TLS yekubatanidza nevatambi, yeruzhinji kiyi kusunga (kiyi pinning) inobatanidzwa. Kana pakange pasina chinosungirwa pakubatanidza, kiyi inobuda ichapihwa kubatana. Kana kusungirirwa kwave kusimbiswa, asi kiyi isingaenderane nayo, kubatana kucharambwa. TLS ine kiyi yekusunga inotsanangurwa senzira inokurudzirwa yekubatanidza kune vezera.
- Iyo kodhi yekufambisa uye yesesheni manejimendi yakagadziridzwa zvachose uye yakanyorwa patsva, zvichibvumira kuwedzera kwekuwedzera uye kuvimbika, kunyanya kune node dzinowanzo chinja vezera. Cryptographic zvikamu zvinoshandisa periodic key kutenderera. Yakawedzera tsigiro yeSisi routing, iyo inogona kushandiswa kutungamira mushandisi IPv6 traffic. Yakagadziridzwa patsva yakagoverwa hash tafura (DHT) architecture uye yakawedzera rutsigiro rweDHT-based routing. Kuitwa kwenzira dzealgorithms kwaendeswa kune imwe raibhurari yakasiyana.
- IPv6 IP kero dzave kugadzirwa kubva kued25519 makiyi eruzhinji kwete yavo X25519 hashi, izvo zvichaita kuti ese emukati IPs achinje kana achienda kuYggdrasil 0.4 kuburitswa.
- Mamwe marongero akapihwa ekutsvaga Multicast vezera.
Source: opennet.ru