rklaehn

7 ms·

61.
by rklaehn 4mo ago
If you run a public unauthenticated relay you act as a home relay for whoever has your relay configured in their relay map and is close in terms of latency. So you might get a lot of traffic. You can configure rate limiting, as we do on our
62.
by rklaehn 4mo ago
Iroh is a project that combines existing IETF standards in an interesting way. For example we use raw public keys in TLS for the key exchange https://datatracker.ietf.org/doc/html/rfc7250 instead of coming up with
63.
by rklaehn 4mo ago
A key distinguishing factor is that iroh is meant to be used as a library that you can embed into your desktop, mobile or embedded apps. Up to now our users are mostly teams that have a rust or C/C++ core, such as https://de
64.
by rklaehn 4mo ago
We have an answer, but it isn't really clever. We do have both built in and pluggable address lookup services. Our default enabled address lookup service is using DNS in a creative way, but we also have a service that is fully peer to
65.
by rklaehn 4mo ago
I am one of the iroh developers. A question that frequently comes up: when will iroh support webrtc, or BLE, or LoRa, or ... Iroh as of now supports only IPv4, IPv6 and relay transports out of the box. There is such a large variety of poten
66.
by rklaehn 11mo ago
This article is written as if SpaceX does not exist. Every single comparison is against 30, 35 year old obsolete technology. Power: It uses the ISS solar arrays as reference. They are obsolete for decades. A much better reference for the pu
67.
A new stream abstraction for rust(docs.rs)
2 points by rklaehn 11mo ago|0 comments
68.
Frugal Async Rust(worm-blossom.org)
5 points by rklaehn 11mo ago|0 comments
69.
by rklaehn 1y ago
You can enable direct lookup and publishing on mainline. See https://docs.rs/iroh/latest/iroh/discovery/pkarr/dht/struct.... If you use this discovery mechanism the iroh node will directly publ
70.
by rklaehn 1y ago
Iroh will do hole punching through NATs. It will even work in many cases when there are NATs on both sides. There are some limitations regarding some double NATs or very strictly configured corporate firewalls. This is why there is always t
71.
by rklaehn 1y ago
I think the OP wants a built in solution to send unreliable datagrams larger than the MTU.
72.
by rklaehn 1y ago
Nice list. I think iroh checks all the boxes but one. ( ) Doesn't contain window logic to emulate best-effort datagrams over about 1500 bytes So you want a way to send unreliable datagrams larger than one MTU. We don't have that,
73.
by rklaehn 1y ago
I am not one of the cryptographers on the team, but I will try to answer to the best of my knowledge. QUIC is specifying TLS, specifically TLS 1.3 or larger. From the RFC 9001 (Using TLS to Secure QUIC): "Clients MUST NOT offer TLS ver
74.
by rklaehn 1y ago
In this particular example there is no multiplexing. It's just one QUIC stream. In other iroh based protocols the ability to have many cheap QUIC streams without head-of-line blocking is very useful. E.g. we got various request/re
75.
by rklaehn 1y ago
You can forward a locally running TCP service using dumbpipe listen-tcp. E.g. you got a local development webserver running on 127.0.0.1:3000. You can expose this via dumbpipe using dumbpipe listen-tcp --host 127.0.0.1:3000 You get a node t
76.
by rklaehn 1y ago
Anybody who has the ticket and therefore has the public key can connect. Once connected, the connection is encrypted using TLS with the raw public keys in TLS extension ( https://datatracker.ietf.org/doc/html/rfc72
77.
by rklaehn 1y ago
The value proposition of the ticket is that it is just a single string that is easy to copy and paste into chats and the like, and that it has a stable text encoding which we aim to stay compatible with for some time. We have a tool https:
78.
by rklaehn 1y ago
Dumbpipe is using our set of relays. It is meant as a standalone tool as well as a showcase for what you can do with iroh. If you use iroh as a library, you can specify your own relays. It is important to mention that relays are interoperab
79.
by rklaehn 1y ago
We (n0) are running one set of relays. They are rate limited, so they basically only help with the hole punching process. Projects or companies that use iroh can either run their own relays or use our service https://n0des.iroh.c
80.
by rklaehn 1y ago
Thank you for the praise! It is nice to hear that people enjoy these workshops. I would love to see what people would build if they had a little bit more time with help from the n0 team. A one hour or even three hour workshop is too short.
81.
by rklaehn 1y ago
Iroh is one of these low level libraries. It is basically p2p QUIC, where p2p means 1. addressing by node id and 2. hole punching. Dumbpipe is meant to be an useful standalone tool, but also a very simple showcase for what you can do with i
82.
by rklaehn 1y ago
We do use DNS, but we also have an option for node discovery that uses pkarr.org, which is using the bittorrent mainline DHT and therefore is fully decentralised. And, as somebody else remarked, the ticket contains the direct IP addresses f
83.
by rklaehn 1y ago
There might be a small misunderstanding here. Our relays do two things. They relay user data, and relay a small number of special packets to help with hole punching. Other than that they are very simple. They never see unencrypted data, so
84.
by rklaehn 1y ago
The two sides are peers when it comes to connection establishment, but once you have a connection they can and frequently will have different roles. Many existing iroh protocols have clear client and server roles once the connection is esta
85.
by rklaehn 1y ago
We decided to keep things simple. In general we try to provide one good way to do something instead of having a lot of options. E.g. we only provide Ed25519 for keys and in iroh-blobs only BLAKE3 for hashing, instead of having a multihash
86.
by rklaehn 1y ago
Yes. Iroh itself provides direct QUIC connections. iroh-blobs is a protocol on top of iroh that provides content-addressed data transfer of BLAKE3 hashed data. What you describe sounds like https://www.dumbpipe.dev/ , a too
87.
by rklaehn 1y ago
To expand on this: iroh is a rust library. A NodeId is just an Ed25519 public key, but of course it has a distinct type. If in the future we want a different public key standard, it would be a different rust type. Encoding keys is mostly le
88.
by rklaehn 2y ago
OK, thanks for the clarification. I have nothing against crypto in principle, but I really don't want Iroh to be associated with crypto scams. Iroh is just a library for p2p connections. You can use it for crypto, but I would say that
89.
by rklaehn 2y ago
I am a contributor to Iroh ( https://github.com/n0-computer/iroh ), an open source library for direct QUIC connections between devices that can be behind a NAT. Our library is general purpose and can be used whenever y
90.
by rklaehn 2y ago
> Shame it's being abused by crypto bros who want to treat it as money. Iroh contributor here. I don't know what you are referring to. Iroh is just a library to provide direct QUIC connections between devices, even if they are

More ›