my-network / ipvpn

[WIP] Easy-to-use decentralized secure overlay private network (for any device)

Intro

The parent project is mynet. This module is responsible for creating a VPN through all required devices. It could be used as a separate solution (on a server, for example), but it was supposed to use mynet on desktops

Architecture

We use:

• IPFS. It's used as:
  • Node discovery (using their DHT).
  • Fallback connector (when it's impossible to connect nodes directly).
  • STUN-replacement (tools to pass-trough a NAT).
  • Messenger (to send notification among nodes).
• WireGuard. It's used as the VPN implementation. If OS doesn't support WireGuard then we detect it and use an userspace implementation.

An ipvpn node is also a full ipfs node, so it consumes some traffic background.

NAT traversal

Used techniques:

• UDP hole punching
• Planned: UPnP IGD
• Planned: Relaying

Requirements

Run:

• Linux or MacOS only, yet

Build:

• Linux or MacOS only, yet
• Go>=1.13

Quick start

Just run on all your nodes (the sample commands):

# install
GO111MODULE=on go get github.com/my-network/ipvpn/cmd/ipvpnd
sudo mkdir /var/run/wireguard
sudo chown $UID /var/run/wireguard
sudo setcap cap_net_raw,cap_net_admin+ep `go env GOPATH`/bin/ipvpnd

# configure
mkdir -p "$HOME/.ipvpn"
echo "my_unique_network_name_here" > "$HOME/.ipvpn/network_id.txt"
echo "my_password_here" > "$HOME/.ipvpn/password_new.txt"

# run
`go env GOPATH`/bin/ipvpnd

# in other terminal, check:
ip a show dev ipvpn_direct
ip a show dev ipvpn_tunnel
ping -c 5 10.197.202.1
ping -c 5 10.197.203.1

• my_unique_network_here should be replaced by a name of you virtual private network
• my_password_here should be replaced by some secret string

That's it. If my_unique_network_here and my_password_here will match through all of your nodes then they will build an overlay network automatically.

Similar projects

• https://github.com/Gawen/WireHub

ipvpn's Issues

panic: qtls.ConnectionState not compatible with tls.ConnectionState

OS: ubuntu 20.04
golang: go version go1.16.3 linux/amd64

terminal log

chchang@hqdc039:~/Downloads/ipvpn$ `go env GOPATH`/bin/ipvpnd
panic: qtls.ConnectionState not compatible with tls.ConnectionState

goroutine 1 [running]:
github.com/lucas-clemente/quic-go/internal/handshake.init.0()
	/home/chchang/go/pkg/mod/github.com/lucas-clemente/[email protected]/internal/handshake/unsafe.go:17 +0x12e
chchang@hqdc039:~/Downloads/ipvpn$ 

any suggestions ??

Before I look at the code

Can this be plugged into a webrrc algorithm? I have one of those

Add support of I2P-tunneling.

Consider: https://github.com/hkparker/go-i2p

Or may be it would be better to add such a transport to IPFS.

Regarding documentation - what does this command do??

In the README documentation it says in the "install section"

install

GO111MODULE=on go get github.com/my-network/ipvpn/cmd/ipvpnd

After some searches I found that the Documentation of the above command is incorrect as it should be least 2 lines:

GO111MODULE=on
go get github.com/my-network/ipvpn/cmd/ipvpnd

Those not normally GO users might not know that and any attempt to executed the command as documented would fail.

is IPVPN alive somewhere else? I'd like to try it out but Quick Start commands fail on Ubuntu 20.04

I know IPFS has improved alot in the last 2 years and I was curious how IPVPN worked using IPFS to help auto-build its
mesh VPN.

$ GO111MODULE=on go get github.com/my-network/ipvpn/cmd/ipvpnd
go get: github.com/my-network/ipvpn@none updating to
github.com/my-network/[email protected] requires
github.com/ipfs/[email protected] requires
github.com/golangci/[email protected] requires
github.com/go-critic/[email protected]: invalid pseudo-version: does not match version-control timestamp (expected 20190526074819)

Make an UI

If there's the first connection to a peer then use it immediately instead of measuring the latency

Reduce CPU consumption

If it is used governor powersave (cpufreq-set -g powersave) then ipvpnd consumes 30% of a core. Which is way too much.

Use random ports for direct WireGuard connections if NAT

Fix building on MacOS

After the recent updates it doesn't build on MacOS anymore

Obfuscatate outgoing traffic (complicate the analysis)

it will be great to have this layer too

Rename project to ipwire

Also rename:

• Package network to p2p.
• Method NewStream to NewIngoingStream.

Add support of I2P-DHT-based discovery

Consider: https://github.com/hkparker/go-i2p

Implement support of relaying within the router

This works? Where are you taking it?

I like the concept. Each node connects to only other nodes with the same name and password. Please give directions for installation and testing in Windows.

Use eventbus instead of handlers

See: https://godoc.org/github.com/libp2p/go-libp2p-core/event#Bus