5 ms·

I've tried a bunch of P2P VPN software, and while PeerVPN is quite OK, unless you really need to tunnel ethernet frames, I'd recommend cjdns: https://github.com

I've tried a bunch of P2P VPN software, and while PeerVPN is quite OK, unless you really need to tunnel ethernet frames, I'd recommend cjdns: https://github.com/cjdelisle/cjdns https://github.com/cjdelisle/cjdns It's actively updated, and the software used for Project Meshnet. You can join the Hyperboria network, or just connect all of your computers isolatedly. I have it running on the computers I manage, from tiny OpenWRT routers to big servers. I did the switch from tinc because certificates are a pain to generate and distribute, and because of security concerns: http://www.tinc-vpn.org/security/ http://www.tinc-vpn.org/security/

codexon 12y ago
cjdns looks interesting but it seems to be ipv6 only. I submitted this story because peervpn looks like the easiest to setup by a wide margin. No certs required and very easy to start on a new machine.
- jMyles 12y ago
  Once running, cjdns creates a virtual ipv6 adapter. To connect to other nodes, it uses either IP(v4 or v6) or Ethernet Frames. See: https://github.com/cjdelisle/cjdns#3-connect-your-node-to-your-friends-node https://github.com/cjdelisle/cjdns#3-connect-your-node-to-yo... I'm working on a Django Rest Framework frontend for it, Cirque: https://github.com/jMyles/cirque https://github.com/jMyles/cirque, which will make this easier to visualize.
  - codexon 12y ago
    This isn't helpful for running software that only supports ipv4 though.
    - jMyles 12y ago
      Ahh, I misunderstood your requirement. Fortunately, CJDNS works for this use case as well. It is possible to use a "tunnel" to connect CJDNS nodes via an IPv4 virtual interface or to connect to a gateway to IPv4. This way, IPv4 software can connect both to other nodes and to the outside internet. At the moment, I believe that this is only configurable through the UDP admin interface, but this is most definitely a feature that we'll build into Cirque. https://github.com/cjdelisle/cjdns/blob/master/admin/README.md#iptunnel-functions https://github.com/cjdelisle/cjdns/blob/master/admin/README....
      - codexon 12y ago
        My personal usage case is to secure a handful of servers across datacenters for software that don't have encryption enabled. If I use CJDNS to do this, it seems like I have a lot more steps to do. I have to copy everyone's pub key and setup ipv4 tunneling on each server? With PeerVPN all I have to do is pick a single password and copy and paste it to each other server while only needing to change the static IP.
Finkregh 12y ago
You might also want to have a look at fastd, which is quite small... https://projects.universe-factory.net/projects/fastd/wiki https://projects.universe-factory.net/projects/fastd/wiki

codexon 12y ago

cjdns looks interesting but it seems to be ipv6 only. I submitted this story because peervpn looks like the easiest to setup by a wide margin. No certs required and very easy to start on a new machine.

jMyles 12y ago
Once running, cjdns creates a virtual ipv6 adapter. To connect to other nodes, it uses either IP(v4 or v6) or Ethernet Frames. See: https://github.com/cjdelisle/cjdns#3-connect-your-node-to-your-friends-node https://github.com/cjdelisle/cjdns#3-connect-your-node-to-yo... I'm working on a Django Rest Framework frontend for it, Cirque: https://github.com/jMyles/cirque https://github.com/jMyles/cirque, which will make this easier to visualize.
- codexon 12y ago
  This isn't helpful for running software that only supports ipv4 though.
  - jMyles 12y ago
    Ahh, I misunderstood your requirement. Fortunately, CJDNS works for this use case as well. It is possible to use a "tunnel" to connect CJDNS nodes via an IPv4 virtual interface or to connect to a gateway to IPv4. This way, IPv4 software can connect both to other nodes and to the outside internet. At the moment, I believe that this is only configurable through the UDP admin interface, but this is most definitely a feature that we'll build into Cirque. https://github.com/cjdelisle/cjdns/blob/master/admin/README.md#iptunnel-functions https://github.com/cjdelisle/cjdns/blob/master/admin/README....
    - codexon 12y ago
      My personal usage case is to secure a handful of servers across datacenters for software that don't have encryption enabled. If I use CJDNS to do this, it seems like I have a lot more steps to do. I have to copy everyone's pub key and setup ipv4 tunneling on each server? With PeerVPN all I have to do is pick a single password and copy and paste it to each other server while only needing to change the static IP.

Finkregh 12y ago

You might also want to have a look at fastd, which is quite small... https://projects.universe-factory.net/projects/fastd/wiki https://projects.universe-factory.net/projects/fastd/wiki