emissary is an I2P router written in Rust.

With emissary, you can browse and host eepsites, use torrents (qBittorrent and I2PSnark tested), read and send email, and chat on Irc2P. Currently it's closer to i2pd in that it doesn't include bundled applications, apart from an optional (and ugly) router UI. However, I hope that in the future it will provide an experience similar to that of the official implementation.

There are also lots of things missing. SSU2 is very experimental (only tested locally) and bandwidth usage can only be controlled by limiting the number of transit tunnels. All of these will be fixed in the future.

If you're a Rust programmer interested in contributing, there are plenty of easy tasks to get started with.

This release improves I2P by fixing bugs, removing unused code, and improving network stability.

We have improved handling of congested routers in the network. Issues in UPnP and NAT traversal were addressed to improve connectivity and error reporting. We now have a more aggressive strategy for leaseset removal from the NetDb to improve router performance and mitigate overload. Other changes were implemented to reduce the observability of events like a router rebooting or shutting down.

As usual, we recommend that you update to this release. The best way to maintain security and help the network is to run the latest release.

The way DNS works in i2p makes it unreliable and vulnerable to attacks. It wouldn't be to hard for an adversary to do a man in the middle or even do a fake version of a site. Also resolving DNS names is hard and takes a lot of effort.

Honestly the entire system needs to be rethought.

Hello you wonderfull people.

So as the tittle suggest. I am wondering if it is possible to host lemmy instances on I2P. If this is possible, how would this work together with main internet lemmy and is this wanted? i would assume this would require some sort of out proxy's and or bridges.

Is it possible to run yacy on i2p to crawl Websites?

Is it possible to set up an i2p gateway in opnsense so that everyone on the network can access i2p?

I used i2p from InviZible Pro (F-Droid).

I was trying to connect my Monero wallet to a Monero RPC Damon that somebody I know runs and while it did connect the absolute best speed I could ever achieve through it was 45KiB/s. I changed no settings at all and just used the defaults. Turned it on and had 33 client tunnels.

Tor usually gets me ~400KiB/s to the hs, but i thought i2p would be faster.

Edit: it used 2 hops as default and i left it that way.

I want to access i2p on my vps without a always connected ssh tunnel. to tried to configure the client.config according to this: https://geti2p.net/en/faq "Configuring your console to be available on a Public IP address with a username & password

Open ~/.i2p/clients.config and replace

                clientApp.0.args=7657 ::1,127.0.0.1 ./webapps/
          

with

                clientApp.0.args=7657 ::1,127.0.0.1,(System_IP) ./webapps/
          

where you replace (System_IP) with your system's public IP address
Go to http://localhost:7657/configui and add a console username and password if desired - Adding a username & password is highly recommended to secure your I2P console from tampering, which could lead to de-anonymization.
Go to http://localhost:7657/index and hit "Graceful restart", which restarts the JVM and reloads the client applications

After that fires up, you should now be able to reach your console remotely. Load the router console at http://(System_IP):7657 and you will be prompted for the username and password you specified in step 2 above if your browser supports the authentication popup. NOTE: You can specify 0.0.0.0 in the above configuration. This specifies an interface, not a network or netmask. 0.0.0.0 means "bind to all interfaces", so it can be reachable on 127.0.0.1:7657 as well as any LAN/WAN IP. Be careful when using this option as the console will be available on ALL addresses configured on your system." Is this possible or do i missunderstood something? i want to use yunohost with redirect to redirect fom 127.0.0.1:7657 to my domainexample routersubdomain.mydomain.com. Is this even possible? Setting clientApp.0.args=7657 ::1,127.0.0.1,(System_IP) ./webapps/ wont work for me. I guess its a chain of misstakes i do :S

Hello, everyone!

I am running I2P and would like to have it port-forwarded to help out the network. Even though I have port-forwarded both UDP and TCP, it always indicates "firewalled" or "symmetric NAT." As far as I am aware, I do not have a symmetric NAT. I run many other port-forwarded services without any issues, some publicly, so I am not sure what the specific issue with I2P is.

EDIT: After some more digging i managed to fix the issue while using docker. For some reason you need to add the environmental variable EXT_PORT to the compose file like so

services:
    i2p:
        image: geti2p/i2p:latest
        environment:
            - EXT_PORT=XXXX <Make this the same port as the public UDP/TCP port>
        volumes:
            - /XXX/I2P-data/i2pconfig:/i2p/.i2p
            - /XXX/I2P-data/i2ptorrents:/i2psnark
        ports:
            - 4444:4444
            - 6668:6668
            - 7657:7657
            - XXXX:XXXX
            - XXXX:XXXX/udp

On Android/GrapheneOS, Firefox/Mull/variants is the only browser with the needed proxy settings to use with i2p.

After a bit of searching, it works very well!

As i2p servers you can use "i2p", "i2pd" (more minimal but more efficient) or "InviziblePro" which bundles some implementation of i2p.

I am using i2pd currently, and it works well.

Installed the apps with Obtainium

• Mull from the DivestOS F-Droid repo
• i2pd from the purplei2p F-Droid repo
• MullvadVPN from Github, Orbot from the guardianproject repo (as fallback if clearnet sites are used)

The browser can open .i2p and clearnet sites, using a little hack:

network.proxy.no_proxies_on to !.i2p

Found Lemmy instance in i2p.

http://kulervod.i2p

I been trying to understand the difference between i2p to things like Tor and VPNs.

To my understanding, i2p is its own closed off network, meaning you cannot use i2p to access stuff outside of i2p like the clear net, onion domains, etc?

When using i2p, all traffic is relayed through other users in the i2p network like Tor but there is really no such thing as an exit node since you cannot access content outside of i2p?

Therefore i2p is good for hosting .i2p domains that can only be accessed in the i2p network and is good for P2P applications like Bittorrent?

Is this correct? Or am I still misunderstanding i2p?

And therefore could you and other users on i2p run a bitcoin nodes which will only be federated with bitcoin nodes with the i2p network and never federate with the rest of the bitcoin network, essentially making a fork of bitcoin blockchain on i2p?

And is there any other good use cases to i2p besides dark net websites and torrenting?

[2.54.0] - 2024-10-06

Added

• Maintain recently connected routers list to avoid false-positive peer test
• Limited connectivity mode(through proxy)
• "i2p.streaming.profile" tunnel's param to let tunnel select also low-bandwidth routers
• Limit stream's inbound speed
• Periodic ack requests in ratchets session
• Set congestion cap G immediately if through proxy
• Show tunnel's routers bandwidth caps in web console
• Handle immediate ack requested flag in SSU2 data packets
• Resend and ack peer test and relay messages
• "senduseragent" HTTP proxy's param to pass through user's User-Agent

Changed

• Exclude 'N' routers from high-bandwidth routers for client tunnels
• C++11 support has been dropped, the minimal requirement is C++17 now, C++20 for some compilers
• Removed dependency from boost::date_time and boost::filesystem
• Set default i2cp.leaseSetEncType to 0,4 and to 4 for server tunnels
• Handle i2cp.inboundlimit and i2cp.outboundlimit params in I2CP
• Publish LeaseSet with new timestamp update if tunnel was replaced in the same second
• Increase max number of generated tags to 800 per tagset
• Routing path expiration by time instead num attempts
• Save timestamp from epoch instead local time to profiles
• Update introducer's iTag if session to introducer was replaced to new one
• RTT, window size and number of NACKs calculation for streaming
• Don't select same peer for tunnel too often
• Use WinApi for data path UTF-8 conversion for Windows

Fixed

• Jump link crash if address book is disabled
• Race condition if connect through an introducer
• "Date" header in I2PControl response
• Incomplete response from web console
• AEAD verification with LibreSSL
• Number of generated tags and new keys for follow-on tagsets
• Expired leases in LeaseSet
• Attempts to send HolePunch to 0.0.0.0
• Incorrect options size in quick ack streaming packet
• Low bandwidth router appeared as first peer in high-bandwidth client tunnel

I ask because it would be nice to use the "I2P mixed mode" features of qbittorrent, but I want to keep my clearnet traffic on the VPN.

Background

I have I2PD running only on my home gateway for better tunnel uptime.

To ensure that torrent traffic never escapes the VPN tunnel, I have configured qbittorrent to use only the VPN Wireguard interface.

Problem

I think this means qbittorrent I2P traffic will flow into the VPN tunnel, but then the VPN host won't know how to route back to my home gateway where the SAM bridge is running.

I've configured my i2pd proxy correctly so things are somewhat working. I was able to visit notbob.i2p. But sometimes Firefox really likes to replace "http" with "https" when I click on a link or even enter the URL manually into the bar. I have "HTTPS-only mode" turned off, and I also have "browser.fixup.fallback-to-https" set to "false" and "network.stricttransportsecurity.preloadlist" to false.

I tried spying on the HTTP traffic in web dev tools, and I see the request gets NS_ERROR_UNKNOWN_HOST. This does not happen when using the xh CLI HTTP client, so Firefox is doing something weird with name resolution. I made sure to turn off the Firefox DNS over HTTPs setting as well, but it didn't seem to make a difference.

I assume that name resolution needs to happen in i2pd. How can I force Firefox to let that happen?

Update: Chrome works fine.

Update: I started fresh and simplified the setup and it seems fixed. I'm not entirely sure why. The only things I've changed from default are DoH and the manual HTTP proxy.

I recently heard about DHT support on I2Psnark, and got curious whether qBittorrent supports this feature on I2P as well. When I first set up qBittorrent to work with I2P, the guide I used instructed to disable DHT, PeX and Local Peer Discovery due to lacking support and security risks. Has anything changed? Is libtorrent still lagging behind on these features?

--Stolen and reposted here, sorry zab, but I hope you're fine with some extra promotion--

Hi,

[...]

After about a year off MuWire is back to the land of the living and the network has ~50 active users at any given time. Here is how to set it up and connect:

1. Go to the GitHub release page

2. Download the connections.txt file and save it somewhere

3. Depending on your operating system:

On Windows, download the MuWire-0.8.14-beta2.exe installer and run it. It will install everything you need to run MuWire. Skip to step 5.

On Linux, you need to install Java 17 or newer. This will be different on each distribution

On Mac, you need to install Java from [here] (https://jdk.java.net/22/) (available for both Intel and Apple Silicon).

4. Download the [MuWire-0.8.14-beta2.zip] (http://muwire-0.8.14-beta2.zip/) file and unzip it. Run the bin/MuWire script to launch MuWire.

5. Go through the MuWire setup wizard. When the main window appears, select Connections (top-left menu) -> Import connections and select the connections.txt file you saved in step 1.

Watch the bottom right of the main window - there is an icon like a molecule with the number of active connections to the MuWire network. As soon as MuWire connects, you can use it to search, share, download, message other users and more.

Enjoy!

zab_

[2.53.0] - 2024-07-19

Added

• New congestion control algorithm for streaming
• Support miniupnp-2.2.8
• Limit stream's outbound speed
• Flood to next day closest floodfills before UTC midnight
• Recognize duplicated routers and bypass them
• Random SSU2 resend interval

Changed

• Set minimal version to 0.9.69 for floodfills and 0.9.58 for client tunnels
• Removed openssl 1.0.2 support
• Move unsent I2NP messages to the new session if replaced
• Use mt19937 RNG instead rand()
• Update router's congestion caps before initial publishing
• Don't try introducer with invalid address
• Select newest introducers to publish
• Don't request relay tag for every session if we have enough introducers
• Update timestamp for non-reachable or hidden router
• Reset streaming routing path if duplicated SYN received
• Update LeaseSet if inbound tunnel failed
• Reseeds list

Fixed

• Crash when a destination gets terminated
• Expired offline signature upon destination creation
• Race condition between local RouterInfo buffer creation and sending it through the transports