4 ms·
Hopefully the network segregation[1] feature makes it in at some point: > A shared network key, included in the tree announcements, will ensure that two nodes
by genpfault 3y ago
Hopefully the network segregation[1] feature makes it in at some point:
> A shared network key, included in the tree announcements, will ensure that two nodes that peer with what should be segregated networks will ignore each other. This should make it much easier to operate private Yggdrasil meshes and not worry that they will end up accidentally peered to the public network.
[1]: https://github.com/yggdrasil-network/yggdrasil-go/discussions/905 https://github.com/yggdrasil-network/yggdrasil-go/discussion...
- neilalexander 3y agoThe current code we have for Yggdrasil v0.5 allows creating isolated networks using TLS roots. You can optionally provision the node identity as a TLS certificate and key and specify a root certificate, so that Yggdrasil will reject peerings with other nodes unless the peer presents a certificate from the same root. It should make it significantly easier to manage fleets of nodes under the same root whilst preventing accidental peerings to other networks.