Yggdrasil – Early-stage implementation of an end-to-end encrypted IPv6 network

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by FuriouslyAdrift on Monday June 21, 2021 @08:04AM (#27578344)

It's an overlay network (a software defined network that runs on top of another network... like you internet service providers network).

It's closer to bittorent than a VPN. It has end-to-end encryption and each node (the app that runs on your PC) distributes routes to each other (similar to how routing works on the Internet between large networks). It appears to be a flat spanning-tree style network.

They mention that it is using similar code and ideas as the cjdns project.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by y04nn on Monday June 21, 2021 @08:29AM (#27578498)

This page [1] has answered most of the questions I has on the project.

[1] https://yggdrasil-network.github.io/about.html

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by abra0 on Monday June 21, 2021 @08:13AM (#27578392)

Do I understand correctly that it does not do hole-punching, and e.g. unlike with a VPN a host behind NAT will not be able to accept incoming connections?

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by Sleepytime on Monday June 21, 2021 @09:29AM (#27578940)

This is correct in the sense of peering, however hosts behind a NAT can simply connect to any other host on the network such as a pubic peer and then they can accept incoming connections over the yggdrasil network.

I use yggdrasil for NAT hole punching my VPN, for example.

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by fretn on Monday June 21, 2021 @08:20AM (#27578438)

can it be a bit compared to what tailscale does for ipv4 ?

[ Parent | on HN ]

Re:Yggdrasil – Early-stage implementation of an end-to-end e... by Sleepytime on Monday June 21, 2021 @09:47AM (#27579119)

I haven't used tailscale so... I think so? Tailscale is pretty light on the details, and even their docs say that they have been reluctant to describe how it works.

>People often ask us for an overview of how Tailscale works. We’ve been putting off answering that, because we kept changing it!

Yggdrasil is fully peer to peer and doesn't require a central coordinator like tailscale does. Ygg is closer to a global network than a private one. You can make a private network, but if any peers on the network peer to the global net then your whole network is now peered. this should be handled at the firewall level, or with an overlay VPN.

[ Parent | on HN ]