8
I need someone to do a sanity check for me and to explain encrypted lease sets (lemmy.zip)
submitted 10 months ago* (last edited 10 months ago) by possiblylinux127@lemmy.zip to c/i2p@lemmy.world
6 comments fedilink hide all child comments

So I'm trying to bridge to physical locations together. At one location I control the firewall and at the other I don't. I would normally use Wireguard but its all dynamic IPs so it would break every so often.

My though was to use I2P to create a bridge between the 2 places. I will use 0 hops on each with encrypted lease sets.

Is this a sain setup? What drawbacks will this have and will it be problematic? Also what security should I use for my encrypted lease set? I want only one device to connect and no others.

Edit: I think I'll use i2p for dns

top 6 comments
sorted by: hot top controversial new old
[-] slazer2au@lemmy.world 1 points 10 months ago

I2p seems an odd choice when DYNAMIC DNS exists for this particular situation where non static IPs are used.

[-] supervent@lemmy.dbzer0.com 3 points 10 months ago

In my case I use duckdns.org for DDNS, it is free and works well with wireguard.

[-] possiblylinux127@lemmy.zip 2 points 10 months ago

Not terribly secure and is not nearly as fun.

[-] meldrik@lemmy.wtf 1 points 10 months ago

Why not something like Zerotier?

[-] possiblylinux127@lemmy.zip 1 points 10 months ago

Because that's proprietary and adds more latency. I already have a vps for routing traffic into my server farm so if I was going to to go that route I wouldn't even bother with ZeroTier

[-] 0v0@sopuli.xyz 1 points 10 months ago* (last edited 10 months ago)

Yes this is sane and one of the main use cases for encrypted lease sets. Encrypted lease sets make it impossible for unauthorized users to connect to your hidden services.

If you know beforehand that only one client needs to be able to connect, choose "DH" as a security strategy, and share the client's key with the server. This article explains these concepts in detail.

If you don't care about anonymity (given the 0-hop tunnels), you could also stick both hosts on an overlay network like Yggdrasil. This may or may not be more convenient / performant based on the number of services you want to expose.

this post was submitted on 25 Dec 2023
8 points (83.3% liked)

The Invisible Internet Project

1284 readers
4 users here now

I2P Community Edition

This isn't the official I2P channel, if you want go there then you can find it in the links below.

Rules

"Don't be a dick" - Wil Wheaton

General

Media:

File Hosting and Pastebins

Torrents

Social Networks and Microblogging

Exploring I2P

I2P Name Registries

Search engines

IRC

Irc2P comes pre-configured with I2P. To connect with other networks, please follow this tutorial.

Syndie

An open source system for operating distributed forums in anonymous networks

Inproxies

You can use inproxies to surf the I2P network without having to have an I2P router.

Follow us on Twitter

founded 1 year ago
MODERATORS
CAVOK@lemmy.world
idki2p@lemmy.one