free
/
freedomboneeee
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

vpn architecture diagram

This commit is contained in:
Bob Mottram 2017-10-27 14:28:49 +01:00
parent 4d6f5d221b
commit 0175ca74f2
6 changed files with 58 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/EN/mesh_usage.org
View File

@ -67,6 +67,11 @@ sudo openvpn myclient.ovpn
Where /myclient.ovpn/ comes from your VPN provider and with the password "/freedombone/". Where /myclient.ovpn/ comes from your VPN provider and with the password "/freedombone/".
* Connecting two meshes over the internet via a VPN tunnel * Connecting two meshes over the internet via a VPN tunnel
#+BEGIN_CENTER
[[file:images/mesh_architecture_vpn.jpg]]
#+END_CENTER
Maybe the internet exists, but you don't care about getting any content from it and just want to use it as a way to connect mesh networks from different geographical locations together. Maybe the internet exists, but you don't care about getting any content from it and just want to use it as a way to connect mesh networks from different geographical locations together.
In your home directory on a system connected via ethernet to an internet router you'll find a file called *vpn.tar.gz*. If you want another mesh to be able to connect to yours then send them this file and get them to uncompress it into their home directory also on an internet gateway machine. If they have an external IP address or domain name for your router then they will be able to VPN connect using the *Connect Meshes* icon. They should also forward port 653 from their internet router to the mesh gateway machine. In your home directory on a system connected via ethernet to an internet router you'll find a file called *vpn.tar.gz*. If you want another mesh to be able to connect to yours then send them this file and get them to uncompress it into their home directory also on an internet gateway machine. If they have an external IP address or domain name for your router then they will be able to VPN connect using the *Connect Meshes* icon. They should also forward port 653 from their internet router to the mesh gateway machine.

BIN
img/mesh_architecture1.jpg
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 111 KiB

After

Width:  |  Height:  |  Size: 41 KiB

BIN
img/mesh_architecture2.jpg
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 140 KiB

After

Width:  |  Height:  |  Size: 29 KiB

BIN
img/mesh_architecture3.jpg
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 166 KiB

After

Width:  |  Height:  |  Size: 37 KiB

BIN
img/mesh_architecture_vpn.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 38 KiB

98
website/EN/mesh_usage.html
View File

@ -3,7 +3,7 @@
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<!-- 2017-10-27 Fri 13:10 --> <!-- 2017-10-27 Fri 14:28 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="viewport" content="width=device-width, initial-scale=1" />
<title>&lrm;</title> <title>&lrm;</title>
@ -247,17 +247,17 @@ for the JavaScript code in this tag.
<center><h1>Mesh Network: How to use it</h1></center> <center><h1>Mesh Network: How to use it</h1></center>
<ul class="org-ul"> <ul class="org-ul">
<li><a href="#org5965bc8">Boot trouble</a></li> <li><a href="#org6a43d4d">Boot trouble</a></li>
<li><a href="#org6fc4c27">Set the Date</a></li> <li><a href="#org03f4d8a">Set the Date</a></li>
<li><a href="#org9452f90">Check network status</a></li> <li><a href="#org55f29f9">Check network status</a></li>
<li><a href="#org1e9178e">Connecting to the internet</a></li> <li><a href="#org802070f">Connecting to the internet</a></li>
<li><a href="#org7235347">Connecting two meshes over the internet via a VPN tunnel</a></li> <li><a href="#orgd9dffae">Connecting two meshes over the internet via a VPN tunnel</a></li>
<li><a href="#org78b4990">Mobile devices (phones, etc)</a></li> <li><a href="#org62a60b3">Mobile devices (phones, etc)</a></li>
<li><a href="#org5e54363">Chat System</a></li> <li><a href="#org216d212">Chat System</a></li>
<li><a href="#orgf66d5cf">Collaborative document editing</a></li> <li><a href="#orgfe4d63b">Collaborative document editing</a></li>
<li><a href="#org9df5e68">Social Network</a></li> <li><a href="#org76f234d">Social Network</a></li>
<li><a href="#orgf9d3758">Sharing Files</a></li> <li><a href="#org6154f04">Sharing Files</a></li>
<li><a href="#org04f400a">Blogging</a></li> <li><a href="#orga4dae6b">Blogging</a></li>
</ul> </ul>
<p> <p>
@ -268,9 +268,9 @@ When you first boot from the USB drive the system will create some encryption ke
After a minute or two if you are within wifi range and there is at least one other user on the network then you should see additional icons appear on the desktop, such as <i>Other Users</i> and <i>Chat</i>. After a minute or two if you are within wifi range and there is at least one other user on the network then you should see additional icons appear on the desktop, such as <i>Other Users</i> and <i>Chat</i>.
</p> </p>
<div id="outline-container-org5965bc8" class="outline-2"> <div id="outline-container-org6a43d4d" class="outline-2">
<h2 id="org5965bc8">Boot trouble</h2> <h2 id="org6a43d4d">Boot trouble</h2>
<div class="outline-text-2" id="text-org5965bc8"> <div class="outline-text-2" id="text-org6a43d4d">
<p> <p>
If the system doesn't boot and reports an error which includes <b>/dev/mapper/loop0p1</b> then reboot with <b>Ctrl-Alt-Del</b> and when you see the grub menu press <b>e</b> and manually change <b>/dev/mapper/loop0p1</b> to <b>/dev/sdb1</b>, then press <b>Ctrl-x</b>. If that doesn't work then reboot and try <b>/dev/sdc1</b> instead. If the system doesn't boot and reports an error which includes <b>/dev/mapper/loop0p1</b> then reboot with <b>Ctrl-Alt-Del</b> and when you see the grub menu press <b>e</b> and manually change <b>/dev/mapper/loop0p1</b> to <b>/dev/sdb1</b>, then press <b>Ctrl-x</b>. If that doesn't work then reboot and try <b>/dev/sdc1</b> instead.
</p> </p>
@ -280,9 +280,9 @@ After the system has booted successfully the problem should resolve itself on su
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-org6fc4c27" class="outline-2"> <div id="outline-container-org03f4d8a" class="outline-2">
<h2 id="org6fc4c27">Set the Date</h2> <h2 id="org03f4d8a">Set the Date</h2>
<div class="outline-text-2" id="text-org6fc4c27"> <div class="outline-text-2" id="text-org03f4d8a">
<p> <p>
On the ordinary internet the date and time of your system would be set automatically via NTP. But this is not the internet and so you will need to manually ensure that your date and time settings are correct. You might need to periodically do this if your clock drifts. It's not essential that the time on your system be highly accurate, but if it drifts too far or goes back to epoch then things could become a little confusing in regard to the order of blog posts. On the ordinary internet the date and time of your system would be set automatically via NTP. But this is not the internet and so you will need to manually ensure that your date and time settings are correct. You might need to periodically do this if your clock drifts. It's not essential that the time on your system be highly accurate, but if it drifts too far or goes back to epoch then things could become a little confusing in regard to the order of blog posts.
</p> </p>
@ -292,9 +292,9 @@ On the ordinary internet the date and time of your system would be set automatic
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-org9452f90" class="outline-2"> <div id="outline-container-org55f29f9" class="outline-2">
<h2 id="org9452f90">Check network status</h2> <h2 id="org55f29f9">Check network status</h2>
<div class="outline-text-2" id="text-org9452f90"> <div class="outline-text-2" id="text-org55f29f9">
<p> <p>
Unlike with ordinary wifi, on the mesh you don't get a signal strength icon and so it's not simple to see if you have a good connection. Unlike with ordinary wifi, on the mesh you don't get a signal strength icon and so it's not simple to see if you have a good connection.
</p> </p>
@ -317,9 +317,9 @@ When you are finished close the window and then select the <i>Network Restart</i
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-org1e9178e" class="outline-2"> <div id="outline-container-org802070f" class="outline-2">
<h2 id="org1e9178e">Connecting to the internet</h2> <h2 id="org802070f">Connecting to the internet</h2>
<div class="outline-text-2" id="text-org1e9178e"> <div class="outline-text-2" id="text-org802070f">
<div class="org-center"> <div class="org-center">
<div class="figure"> <div class="figure">
@ -350,9 +350,17 @@ Where <i>myclient.ovpn</i> comes from your VPN provider and with the password "<
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-org7235347" class="outline-2"> <div id="outline-container-orgd9dffae" class="outline-2">
<h2 id="org7235347">Connecting two meshes over the internet via a VPN tunnel</h2> <h2 id="orgd9dffae">Connecting two meshes over the internet via a VPN tunnel</h2>
<div class="outline-text-2" id="text-org7235347"> <div class="outline-text-2" id="text-orgd9dffae">
<div class="org-center">
<div class="figure">
<p><img src="images/mesh_architecture_vpn.jpg" alt="mesh_architecture_vpn.jpg" />
</p>
</div>
</div>
<p> <p>
Maybe the internet exists, but you don't care about getting any content from it and just want to use it as a way to connect mesh networks from different geographical locations together. Maybe the internet exists, but you don't care about getting any content from it and just want to use it as a way to connect mesh networks from different geographical locations together.
</p> </p>
@ -379,9 +387,9 @@ From a deep packet inspection point of view the traffic going over the internet
</div> </div>
</div> </div>
<div id="outline-container-org78b4990" class="outline-2"> <div id="outline-container-org62a60b3" class="outline-2">
<h2 id="org78b4990">Mobile devices (phones, etc)</h2> <h2 id="org62a60b3">Mobile devices (phones, etc)</h2>
<div class="outline-text-2" id="text-org78b4990"> <div class="outline-text-2" id="text-org62a60b3">
<div class="org-center"> <div class="org-center">
<div class="figure"> <div class="figure">
@ -411,9 +419,9 @@ On some android devices you may need to move the downloaded APK file from the <b
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-org5e54363" class="outline-2"> <div id="outline-container-org216d212" class="outline-2">
<h2 id="org5e54363">Chat System</h2> <h2 id="org216d212">Chat System</h2>
<div class="outline-text-2" id="text-org5e54363"> <div class="outline-text-2" id="text-org216d212">
<p> <p>
Ensure that you're within wifi range of at least one other mesh peer (could be a router or client) and then you should see that the <i>Chat</i> and <i>Other Users</i> icons appear. Select the users icon and you should see a list of users on the mesh. Select the <i>Chat</i> icon and once you are connected you should see the status light turn green. If after a few minutes you don't get the green status light then try closing and re-opening the Tox chat application. Select the plus button to add a friend and then copy and paste in a Tox ID from the users list. Ensure that you're within wifi range of at least one other mesh peer (could be a router or client) and then you should see that the <i>Chat</i> and <i>Other Users</i> icons appear. Select the users icon and you should see a list of users on the mesh. Select the <i>Chat</i> icon and once you are connected you should see the status light turn green. If after a few minutes you don't get the green status light then try closing and re-opening the Tox chat application. Select the plus button to add a friend and then copy and paste in a Tox ID from the users list.
</p> </p>
@ -472,9 +480,9 @@ At present video doesn't work reliably, but text and voice chat do work well.
</div> </div>
</div> </div>
<div id="outline-container-orgf66d5cf" class="outline-2"> <div id="outline-container-orgfe4d63b" class="outline-2">
<h2 id="orgf66d5cf">Collaborative document editing</h2> <h2 id="orgfe4d63b">Collaborative document editing</h2>
<div class="outline-text-2" id="text-orgf66d5cf"> <div class="outline-text-2" id="text-orgfe4d63b">
<p> <p>
The mesh system includes the ability to collaboratively edit various sorts of documents using CryptPad. CryptPad is an almost peer-to-peer system in that it is designed for a client/server environment but that the server aspect of it is very minimal and limited to orchestrating the connected clients. With CryptPad installed on each mesh peer it effectively enables peer-to-peer collaborative editing. Documents are ephemeral and forgotten unless they're exported or copy-pasted to permanent storage. The mesh system includes the ability to collaboratively edit various sorts of documents using CryptPad. CryptPad is an almost peer-to-peer system in that it is designed for a client/server environment but that the server aspect of it is very minimal and limited to orchestrating the connected clients. With CryptPad installed on each mesh peer it effectively enables peer-to-peer collaborative editing. Documents are ephemeral and forgotten unless they're exported or copy-pasted to permanent storage.
</p> </p>
@ -505,9 +513,9 @@ If you have the chat system running you can then copy and paste the URL for your
</div> </div>
</div> </div>
<div id="outline-container-org9df5e68" class="outline-2"> <div id="outline-container-org76f234d" class="outline-2">
<h2 id="org9df5e68">Social Network</h2> <h2 id="org76f234d">Social Network</h2>
<div class="outline-text-2" id="text-org9df5e68"> <div class="outline-text-2" id="text-org76f234d">
<p> <p>
Patchwork is available as a social networking system for the mesh. Like all social network systems it has a stream of posts and you can follow or unfollow other users. You can also send private messages to other users with end-to-end encryption. Patchwork is available as a social networking system for the mesh. Like all social network systems it has a stream of posts and you can follow or unfollow other users. You can also send private messages to other users with end-to-end encryption.
</p> </p>
@ -542,9 +550,9 @@ The Secure Scuttlebutt protocol which Patchwork is based upon is intended to be
</div> </div>
</div> </div>
<div id="outline-container-orgf9d3758" class="outline-2"> <div id="outline-container-org6154f04" class="outline-2">
<h2 id="orgf9d3758">Sharing Files</h2> <h2 id="org6154f04">Sharing Files</h2>
<div class="outline-text-2" id="text-orgf9d3758"> <div class="outline-text-2" id="text-org6154f04">
<p> <p>
You can make files publicly available on the network simply by dragging and dropping them into the <i>Public</i> folder on the desktop. To view the files belonging to another user select the desktop icon called <i>Visit a site</i> and enter the username or Tox ID of the other user. You can make files publicly available on the network simply by dragging and dropping them into the <i>Public</i> folder on the desktop. To view the files belonging to another user select the desktop icon called <i>Visit a site</i> and enter the username or Tox ID of the other user.
</p> </p>
@ -559,9 +567,9 @@ You can make files publicly available on the network simply by dragging and drop
</div> </div>
</div> </div>
<div id="outline-container-org04f400a" class="outline-2"> <div id="outline-container-orga4dae6b" class="outline-2">
<h2 id="org04f400a">Blogging</h2> <h2 id="orga4dae6b">Blogging</h2>
<div class="outline-text-2" id="text-org04f400a"> <div class="outline-text-2" id="text-orga4dae6b">
<p> <p>
To create a blog post select the <i>Blog</i> icon on the desktop and then use the up and down cursor keys, space bar and enter key to add a new entry. Edit the title of the entry and add your text. You can also include photos if you wish - just copy them to the <b>CreateBlog/content/images</b> directory and then link to them as shown. To create a blog post select the <i>Blog</i> icon on the desktop and then use the up and down cursor keys, space bar and enter key to add a new entry. Edit the title of the entry and add your text. You can also include photos if you wish - just copy them to the <b>CreateBlog/content/images</b> directory and then link to them as shown.
</p> </p>