On Thu, 23 Jan 2003, Matthew Toseland wrote:

> On Wed, Jan 22, 2003 at 11:40:43PM +0000, Gordan Bobic wrote:
> > Hi, I've got a few questions about the current fred implementation.
> > 
> > I've heard the issue raised recently about a FAQ stating that the 
> > communication between the Freenet nodes is not encrypted. Is this true? Other 
> > documentation implies that all communication between individual nodes occurs 
> > over encrypted connections. I suspect the FAQ in question is wrong, but I'm 
> > curious to find out for sure.
> 
> Not true. _Everything_ is encrypted in freenet, at least once.
> Connections are encrypted using the node public/private keypairs.

Aren't connections between the nodes connected on a per-connection basis 
with one-off keys (like https, for example)? Or was this deemed 
unnecessary, and the payload is just sent to the relevant port, so only 
the intended recipient node can actually decode and read it?

> > The next question is regarding the network setup used for Freenet. Can the 
> > current node implementation deal with living on multiple IP addresses at the 
> > same time? If Fred is running on a multi-homed system, load balanced over 
> > multiple networks, with the relevant ports forwarded from the central hub to 
> > the actual node (single interface on fred host, with multiple interfaces 
> > port-forwarded to it from the hub), will this work as expected? Or is it 
> 
> Well... it won't autodetect. But if you set up round-robin DNS for the
> IP addresses, and then force ipAddress to that address, _that_ is known
> to work.

How will the network deal with the situation where nodes exchange routing 
information, and some think that a particular key is related to one IP 
address, but the others think it is related to a different address, at the 
same time? Will this not cause information drift where eventually all 
nodes will converge to one IP address? Or do the nodes understand the 
concept of multiple IP addresses? Or is the node location always assessed 
by name, rather than IP address, when the name is supplied?

> > Thirdly, what are the implications of running multiple nodes on the same IP 
> > address(es), on different ports? Will this work as expected? Will it work at 
> > all? Will it break all of the nodes sharing the address(es)?
> 
> Yeah, it works. It is used extensively by developers for testing
> purposes.

OK, thank you. :-)

Will these nodes end up talking to each other? Or will they 
ignore each other when they notice they are on the same IP address?

> A node identity is a public key... the node itself has a private key.
> Normally passed along with this is a list of "physical addresses",
> including something like tcp/arthas.dyndns.org:9013.

So, the addresses are always passed by name, when the name is supplied?

Thank you.

Gordan


_______________________________________________
Tech mailing list
[EMAIL PROTECTED]
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/tech

Reply via email to