Yggdrasil – Early-stage implementation of an end-to-end encrypted IPv6 network

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by FuriouslyAdrift on Monday June 21, 2021 @08:04AM (#27578344)

It's an overlay network (a software defined network that runs on top of another network... like you internet service providers network).

It's closer to bittorent than a VPN. It has end-to-end encryption and each node (the app that runs on your PC) distributes routes to each other (similar to how routing works on the Internet between large networks). It appears to be a flat spanning-tree style network.

They mention that it is using similar code and ideas as the cjdns project.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by y04nn on Monday June 21, 2021 @08:29AM (#27578498)

This page [1] has answered most of the questions I has on the project.

[1] https://yggdrasil-network.github.io/about.html

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by abra0 on Monday June 21, 2021 @08:13AM (#27578392)

Do I understand correctly that it does not do hole-punching, and e.g. unlike with a VPN a host behind NAT will not be able to accept incoming connections?

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by Sleepytime on Monday June 21, 2021 @09:29AM (#27578940)

This is correct in the sense of peering, however hosts behind a NAT can simply connect to any other host on the network such as a pubic peer and then they can accept incoming connections over the yggdrasil network.

I use yggdrasil for NAT hole punching my VPN, for example.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by fretn on Monday June 21, 2021 @08:20AM (#27578438)

can it be a bit compared to what tailscale does for ipv4 ?

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by Sleepytime on Monday June 21, 2021 @09:47AM (#27579119)

I haven't used tailscale so... I think so? Tailscale is pretty light on the details, and even their docs say that they have been reluctant to describe how it works.

>People often ask us for an overview of how Tailscale works. We’ve been putting off answering that, because we kept changing it!

Yggdrasil is fully peer to peer and doesn't require a central coordinator like tailscale does. Ygg is closer to a global network than a private one. You can make a private network, but if any peers on the network peer to the global net then your whole network is now peered. this should be handled at the firewall level, or with an overlay VPN.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by dsr_ on Monday June 21, 2021 @08:04AM (#27578348)

No, it's a kind of virtual public network.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by loloquwowndueo on Monday June 21, 2021 @08:47AM (#27578609)

So not a kind of VPN, but a kind of VPN? :)

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by apetresc on Monday June 21, 2021 @09:48AM (#27579124)

The "P" in VPN usually stands for "Private", not "Public".

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by nickik on Monday June 21, 2021 @10:56AM (#27579781)

I think that was the joke.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by Forbo on Monday June 21, 2021 @10:16PM (#27587238)

You joke, but unfortunately this was the poor wording that GNUnet chose to use. https://docs.gnunet.org/handbook/gnunet.html#First-steps-_00...

I still facepalm whenever I think about this.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by fragileone on Monday June 21, 2021 @01:45PM (#27581608)

A mesh VPN, or kinda a mesh TOR really.

[ Parent | on HN ]