#dev (ilita) | Обсуждение разработки I2Pd | i2pd development discussion | http://i2pd.website/

chud can somebody tell alpine maintainers that gitlab.alpinelinux.org/alpine/aports/-/merge_requests/97355 is a security update?

chud ffs

orignal zzz, since I can't aothenticate at I2rc2P for few days and you are in carage ove reseeds

orignal <sonya> @903/error - Tunnels: Can't select next hop for ... error - Tunnels: Can't create inbound tunnel, no peers available ... error - Reseed: Failed to reseed from reseed.sahil.world:443/i2pseeds.su3, http code 418

orignal it seems new one

zzz ok, thanks, will test and send some email

zzz orignal, 418 is a rate limit, probably due to the botnet. That one worked for me, but some others appear down

orignal so, the botnet doesn't persist netdb?

orignal there is another problem

zzz don't know, but diva.exchange reports a lot of traffic

orignal router from Russia often become out of routers

orignal because they become unreacable and i2pd deletes them

orignal that's what happeed to sonya

orignal any suggestion from you?

zzz you're deleting and banning them permanently? or just transient 'delete' until next store?

orignal only deleting

orignal because I assume they are not online(not usable) anymore

zzz do you delete if you are ff?

orignal not sure, need to check

zzz you probably shouldn't delete if you are ff and they are in your keyspace

orignal probably yes, if I can't reach one

orignal why?

orignal if a router is bad why should I keep it?

zzz because maybe they aren't really gone, you don'tknow for sure

zzz if they publish their RI to you, keep it for an hour, then expire it as usual

orignal then an attacker can flood me with bunch of fake routers

orignal if I received them trough flood

zzz sure but you can throw them out if not in your keyspace

orignal an advesary can generate them from my keyspace

orignal direct connectivity is a good test

orignal I bet jrandom didn't think about huilos of all kind

zzz sorry. I need to buy more RAM. 8 GB isn't enough for firefox or chrome

zzz anyway, we do what you do, we delete and we don't check keyspace if ff

zzz not sure if your theory is right

orignal how about regular routers

zzz same

zzz maybe we should add keyspace check if ff. not sure

orignal I mean the sitiation in Russia

orignal you are an ordinary router but can't reach many peers

zzz tell me more what sonya's symptoms are. no connections?

orignal sonya

orignal <sonya> с дикими блокировками..

orignal <orignal> блокивровкаи от хуйла?

orignal <sonya> да

orignal the symtomps are

orignal after restart she became of routers

orignal I think she lost most of them because couldn't reach thme

zzz is it because of the botnet, or Russia firewall/blocking, or is she firewalled, or???

orignal because Russia

orignal firewalled was never been an issue

zzz ok so she has very low RIs in her netdb?

orignal yes, that's my guess

orignal routers just disappeared

orignal that's why we have "stan" mode for such situation

orignal but accroding to her she didn't have it on

zzz so sounds like any fixes you do would be on "her side", not on floodfills or fast routers

zzz some suggestions:

zzz don't delete RIs if you have very few

zzz explore more if you have very few

zzz we will explore pretty aggressively if our RI count is low

orignal ha

orignal I have this code already

orignal hence if no or low transports I don't delete

orignal but sitiation in Russia is different

orignal it works partially

zzz sure

orignal plenty gof transports

zzz if connection sucks, i2p is going to suck, not sure there is a good fix

orignal bt something whole /16 subnets are not reachable

orignal just tell you the situation

zzz right

zzz do you run any routers in RU for testing? maybe somebody can give you a VM to test?

orignal no, I have nothing in RU

orignal but I receive a lot of feedback

zzz would be good though so you can see for yourself, would make it much easier to design improvemnents

orignal there is another problem with RU

orignal it's regional

zzz yup

orignal meaning if I run simething in Moscow it doesn't mean it will be the same in Urupinsk

zzz right

orignal every region has different situation

zzz anyway, FYI if we have less than 250 RIs we explore 15x faster than normal

orignal I use you algorithms

orignal for exploration

zzz ok. don't have a lot of ideas

zzz tough situation

orignal the idea should be to detect such situation in advance

zzz i2p really likes to be "full mesh" - everybody can connect to everybody. When that's not true things don't work well

orignal maybe abnormal connectivity rate

orignal that's what I said, jrandom didn't think about idiots lke putin

zzz well actually he did, he talked about a thing called "restricted routes", and sonya would connect mostly through another router to the rest of the network

zzz he said restricted routes would be supported in I2P 3.0 lolol

zzz thing is, it's really hard to do

orignal we have restricted routes too

orignal called trusted routers

orignal we connect to them only

orignal onon uses one

zzz interesting, didn't know. fine for outbound, but how do others connect to onon?

orignal no transit ofc

zzz I have an old post that analyzes restricted route features. It talks about trusted routers. zzz.i2p/topics/114

orignal for inbound you build tunnels through trusted too

orignal afaik, psi ahs implemented this long time ago

zzz maybe you've solved some of the problems I listed

orignal I'm not familier with this mode too much because it was implemented by psi, all I know that onon uses it a lot

zzz good topic for more research and investigation

orignal well I will tell you how "stan" works

orignal but first is UDP tunnels description

zzz ha

zzz maybe time to put all of RU in stan mode?

orignal zzz, what do you think to publish RI through tunnels if Firewalled

orignal maybe but let's see

orignal zzz i2pgeo.i2p

orignal looks like they sit on floodfills can collect all peers IPs

orignal *and

orignal and if you are from some rare region ююю

orignal Blinded message

zzz we publish RI through tunnels sometimes

orignal we too if not reachable directly

orignal but my proposal is to publush through tunnels if firewalled

zzz firewalled is really about inbound though. Maybe it affects outbound, but probably not

orignal firewalled is really about mobile networks

orignal or maybe you have an explicit param for this?

zzz no

zzz else if (ctx.commSystem().isEstablished(h) ||

zzz (!ctx.commSystem().wasUnreachable(h) && _connectChecker.canConnect(_connectMask, peer)))

zzz sendDirect(msg, peer, expiration);

zzz else

zzz sendStoreThroughExploratory(msg, peer, expiration);

orignal we migh think aout such param

jerrynic А планируется разработка андроид приложения по типу ретрошары, и - возможно ли собрать ретрошару из исходников.. У меня не получилось.

orignal нет

yanek any1 alive here?

jerrynic может стыдно сказать, но не могу настроить под андроид фоксипрокси, есть какие-нибудь рекоммендации кроме 127.0.0.1:4444

orignal молнию ставь

jerrynic thnx !

Most 05<centeredhonor> > *jerrynic:* А планируется разработка андроид приложения по типу ретрошары, и - возможно ли собрать ретрошару из исходников.. У меня не получилось.

Most 05<centeredhonor> https://xeres.io/

Most 05<centeredhonor> Альтернативная реализация ноды как сервер-клиент.