I2P 2.9.0 is a maintenance release that includes bug fixes and work on new features.

Thread usage has been improved to improve the performance of the i2ptunnel system. NTCP2 has been improved to resist probing attacks. The notification system has been integrated into more applications to provide better feedback to users from I2PSnark and the other applications. Automatic floodfill enrollment has been fixed. Users may observe increased resource usage when acting as floodfill. If this is not desired, floodfill mode can be disabled on the /config page.

A new global map feature is available in the console which shows the locations of routers in your view of the netDb. These are the peers that help your router build tunnels and provide services anonymously.

Work continues on implementing automatic bandwidth management for tunnels, the Datagram2 protocol, and Post-Quantum cryptography. In two releases, at 2.11.0, I2P will require Java 17.

As usual, we recommend that you update to this release. The best way to maintain security and help the network is to run the latest release.

SHA256 Checksums:

• 681884cf79f001a360dd3635f7b31e889d407af8c3edb6fe89d841a5421ba563 i2pinstall_2.9.0_windows.exe
• f4474ca98914f18fce1a4ce37a6b3cd080499919e4202a29b8eae51798f0c7c1 i2pinstall_2.9.0.jar
• 03989319e186d9b06ed96ea0efa6ac95af1bc57af956d7f5f06f52f8da64fcd7 i2psource_2.9.0.tar.bz2
• 1b79b2593bbe60e08da3f84411d48a5f1fe0c8cfd934f1c90d2fece436c1f2b5 i2pupdate_2.9.0.zip
• 2df2d63a65d9d8743098203919693185c910ddd8a53f13e91d5be7d95d1d0e82 i2pupdate.su3

Is it possible to cross-seed from clearnet to i2p via qbittorrent? are there any tutorials out there?

I was only able to find older tutorials for BiglyBT. Is it the same process?

A review of the Easy Install bundle. Might be worth a watch if you're not already familiar with it. Vid a few years old.

emissary is an I2P router written in Rust.

With emissary, you can browse and host eepsites, use torrents (qBittorrent and I2PSnark tested), read and send email, and chat on Irc2P. Currently it's closer to i2pd in that it doesn't include bundled applications, apart from an optional (and ugly) router UI. However, I hope that in the future it will provide an experience similar to that of the official implementation.

There are also lots of things missing. SSU2 is very experimental (only tested locally) and bandwidth usage can only be controlled by limiting the number of transit tunnels. All of these will be fixed in the future.

If you're a Rust programmer interested in contributing, there are plenty of easy tasks to get started with.

Outproxy doesn't work

Using I2P+/I2PPlus, if there are no pictures attached on Lemmy, try looking at this post on Mastodon.

Does anyone of you know a solution?

@i2p

My arch linux runs i2pd. What torrent client should I use? Id like to

• share seed my own torrents

• add Magnets via terminal

This release improves I2P by fixing bugs, removing unused code, and improving network stability.

We have improved handling of congested routers in the network. Issues in UPnP and NAT traversal were addressed to improve connectivity and error reporting. We now have a more aggressive strategy for leaseset removal from the NetDb to improve router performance and mitigate overload. Other changes were implemented to reduce the observability of events like a router rebooting or shutting down.

As usual, we recommend that you update to this release. The best way to maintain security and help the network is to run the latest release.

The way DNS works in i2p makes it unreliable and vulnerable to attacks. It wouldn't be to hard for an adversary to do a man in the middle or even do a fake version of a site. Also resolving DNS names is hard and takes a lot of effort.

Honestly the entire system needs to be rethought.

The device with I2P is behind a NAT router without UPnP. The device has a firewall but has opened the UDP and TCP port for internet facing communication. The ports from the router are forward to the device's ports. Are there any ports missing?

Edit: I finally figured it out. The port forwarding was only for TCP. It would be good to have logs or some kind of status window stating why it thinks it's firewalled though.

Anti Commercial-AI license

Hello you wonderfull people.

So as the tittle suggest. I am wondering if it is possible to host lemmy instances on I2P. If this is possible, how would this work together with main internet lemmy and is this wanted? i would assume this would require some sort of out proxy's and or bridges.

Is it possible to run yacy on i2p to crawl Websites?

Is it possible to set up an i2p gateway in opnsense so that everyone on the network can access i2p?

I used i2p from InviZible Pro (F-Droid).

I was trying to connect my Monero wallet to a Monero RPC Damon that somebody I know runs and while it did connect the absolute best speed I could ever achieve through it was 45KiB/s. I changed no settings at all and just used the defaults. Turned it on and had 33 client tunnels.

Tor usually gets me ~400KiB/s to the hs, but i thought i2p would be faster.

Edit: it used 2 hops as default and i left it that way.

I want to access i2p on my vps without a always connected ssh tunnel. to tried to configure the client.config according to this: https://geti2p.net/en/faq "Configuring your console to be available on a Public IP address with a username & password

Open ~/.i2p/clients.config and replace

                clientApp.0.args=7657 ::1,127.0.0.1 ./webapps/
          

with

                clientApp.0.args=7657 ::1,127.0.0.1,(System_IP) ./webapps/
          

where you replace (System_IP) with your system's public IP address
Go to http://localhost:7657/configui and add a console username and password if desired - Adding a username & password is highly recommended to secure your I2P console from tampering, which could lead to de-anonymization.
Go to http://localhost:7657/index and hit "Graceful restart", which restarts the JVM and reloads the client applications

After that fires up, you should now be able to reach your console remotely. Load the router console at http://(System_IP):7657 and you will be prompted for the username and password you specified in step 2 above if your browser supports the authentication popup. NOTE: You can specify 0.0.0.0 in the above configuration. This specifies an interface, not a network or netmask. 0.0.0.0 means "bind to all interfaces", so it can be reachable on 127.0.0.1:7657 as well as any LAN/WAN IP. Be careful when using this option as the console will be available on ALL addresses configured on your system." Is this possible or do i missunderstood something? i want to use yunohost with redirect to redirect fom 127.0.0.1:7657 to my domainexample routersubdomain.mydomain.com. Is this even possible? Setting clientApp.0.args=7657 ::1,127.0.0.1,(System_IP) ./webapps/ wont work for me. I guess its a chain of misstakes i do :S

Hello, everyone!

I am running I2P and would like to have it port-forwarded to help out the network. Even though I have port-forwarded both UDP and TCP, it always indicates "firewalled" or "symmetric NAT." As far as I am aware, I do not have a symmetric NAT. I run many other port-forwarded services without any issues, some publicly, so I am not sure what the specific issue with I2P is.

EDIT: After some more digging i managed to fix the issue while using docker. For some reason you need to add the environmental variable EXT_PORT to the compose file like so

services:
    i2p:
        image: geti2p/i2p:latest
        environment:
            - EXT_PORT=XXXX <Make this the same port as the public UDP/TCP port>
        volumes:
            - /XXX/I2P-data/i2pconfig:/i2p/.i2p
            - /XXX/I2P-data/i2ptorrents:/i2psnark
        ports:
            - 4444:4444
            - 6668:6668
            - 7657:7657
            - XXXX:XXXX
            - XXXX:XXXX/udp

I am thinking about using i2p to remotely access my Jellyfin instance. I could set the hops on each side to zero but I am curious about battery life and data usage

On Android/GrapheneOS, Firefox/Mull/variants is the only browser with the needed proxy settings to use with i2p.

After a bit of searching, it works very well!

As i2p servers you can use "i2p", "i2pd" (more minimal but more efficient) or "InviziblePro" which bundles some implementation of i2p.

I am using i2pd currently, and it works well.

Installed the apps with Obtainium

• Mull from the DivestOS F-Droid repo
• i2pd from the purplei2p F-Droid repo
• MullvadVPN from Github, Orbot from the guardianproject repo (as fallback if clearnet sites are used)

The browser can open .i2p and clearnet sites, using a little hack:

network.proxy.no_proxies_on to !.i2p

Found Lemmy instance in i2p.

http://kulervod.i2p

I been trying to understand the difference between i2p to things like Tor and VPNs.

To my understanding, i2p is its own closed off network, meaning you cannot use i2p to access stuff outside of i2p like the clear net, onion domains, etc?

When using i2p, all traffic is relayed through other users in the i2p network like Tor but there is really no such thing as an exit node since you cannot access content outside of i2p?

Therefore i2p is good for hosting .i2p domains that can only be accessed in the i2p network and is good for P2P applications like Bittorrent?

Is this correct? Or am I still misunderstanding i2p?

And therefore could you and other users on i2p run a bitcoin nodes which will only be federated with bitcoin nodes with the i2p network and never federate with the rest of the bitcoin network, essentially making a fork of bitcoin blockchain on i2p?

And is there any other good use cases to i2p besides dark net websites and torrenting?

[2.54.0] - 2024-10-06

Added

• Maintain recently connected routers list to avoid false-positive peer test
• Limited connectivity mode(through proxy)
• "i2p.streaming.profile" tunnel's param to let tunnel select also low-bandwidth routers
• Limit stream's inbound speed
• Periodic ack requests in ratchets session
• Set congestion cap G immediately if through proxy
• Show tunnel's routers bandwidth caps in web console
• Handle immediate ack requested flag in SSU2 data packets
• Resend and ack peer test and relay messages
• "senduseragent" HTTP proxy's param to pass through user's User-Agent

Changed

• Exclude 'N' routers from high-bandwidth routers for client tunnels
• C++11 support has been dropped, the minimal requirement is C++17 now, C++20 for some compilers
• Removed dependency from boost::date_time and boost::filesystem
• Set default i2cp.leaseSetEncType to 0,4 and to 4 for server tunnels
• Handle i2cp.inboundlimit and i2cp.outboundlimit params in I2CP
• Publish LeaseSet with new timestamp update if tunnel was replaced in the same second
• Increase max number of generated tags to 800 per tagset
• Routing path expiration by time instead num attempts
• Save timestamp from epoch instead local time to profiles
• Update introducer's iTag if session to introducer was replaced to new one
• RTT, window size and number of NACKs calculation for streaming
• Don't select same peer for tunnel too often
• Use WinApi for data path UTF-8 conversion for Windows

Fixed

• Jump link crash if address book is disabled
• Race condition if connect through an introducer
• "Date" header in I2PControl response
• Incomplete response from web console
• AEAD verification with LibreSSL
• Number of generated tags and new keys for follow-on tagsets
• Expired leases in LeaseSet
• Attempts to send HolePunch to 0.0.0.0
• Incorrect options size in quick ack streaming packet
• Low bandwidth router appeared as first peer in high-bandwidth client tunnel

I ask because it would be nice to use the "I2P mixed mode" features of qbittorrent, but I want to keep my clearnet traffic on the VPN.

Background

I have I2PD running only on my home gateway for better tunnel uptime.

To ensure that torrent traffic never escapes the VPN tunnel, I have configured qbittorrent to use only the VPN Wireguard interface.

Problem

I think this means qbittorrent I2P traffic will flow into the VPN tunnel, but then the VPN host won't know how to route back to my home gateway where the SAM bridge is running.

I've configured my i2pd proxy correctly so things are somewhat working. I was able to visit notbob.i2p. But sometimes Firefox really likes to replace "http" with "https" when I click on a link or even enter the URL manually into the bar. I have "HTTPS-only mode" turned off, and I also have "browser.fixup.fallback-to-https" set to "false" and "network.stricttransportsecurity.preloadlist" to false.

I tried spying on the HTTP traffic in web dev tools, and I see the request gets NS_ERROR_UNKNOWN_HOST. This does not happen when using the xh CLI HTTP client, so Firefox is doing something weird with name resolution. I made sure to turn off the Firefox DNS over HTTPs setting as well, but it didn't seem to make a difference.

I assume that name resolution needs to happen in i2pd. How can I force Firefox to let that happen?

Update: Chrome works fine.

Update: I started fresh and simplified the setup and it seems fixed. I'm not entirely sure why. The only things I've changed from default are DoH and the manual HTTP proxy.