Wikipedia

dn42

dn42[a] is a decentralized peer-to-peer network built using VPNs and software/hardware BGP routers.[1][2][3][4]

While other darknets try to establish anonymity for their participants, that is not what dn42 aims for. It is a network to explore routing technologies used in the Internet and tries to establish direct non-NAT-ed connections between the members.

The network is not fully meshed. dn42 uses mostly tunnels instead of physical links between the individual networks. Each participant is connected to one or more other participants.[5][6] Over the VPN or the physical links, BGP is used for inter AS routing. While OSPF is the most commonly used protocol for intra AS routing, each participant is free to choose any other IGP, like Babel, inside their AS.[7]

History

edit

The dn42 is a reboot of the diac24.[8][9][10] At the time, diac24 only consisted of around a dozen participants.[11] In diac24, the IPv4 address range used was 172.22.0/23 and the IPv6 address range used was 3ffe:400:c00::/48.[12] The dn42 seems to have used the IPv4 space 172.22.0.0/16,[13] the Clearnet IPv6 spaces like 2001:6f8:[14] and the AS range 65000 to 65999 in the early years after that.[15] It can also be said that the diac24 and the dn42 were initially aimed at a German audience, as much of the documentation was written in German. The diac24 mainly used GRE as a tunnel protocol between the participants, but this is not encrypted. In the beginning of the dn42, OpenVPN was often used[16] for peering in the dn42. Over time, this has been replaced by WireGuard, partly due to faster performance and simpler configuration. At that time, the registry was not managed with Git as it is now, but in a wiki page.[17] Anyone who wanted to register entered their desired ASN and IP space there.[18]

Technical setup

edit

Address space

edit

Network address space for IPv4 consists of private subnets: 172.20.0.0/14 is the main subnet.[19] Note that other private address ranges may also be announced in dn42, as the network is interconnected with other similar projects. Most notably, ChaosVPN uses 172.31.0.0/16 and parts of 10.0.0.0/8, Freifunk IC-VPN uses 10.0.0.0/8 [20] and NeoNetwork uses 10.127.0.0/16.[21]

For IPv6, Unique Local Address (ULA, the IPv6 equivalent of private address range) (fd00::/8)[19] are used. Please note that IPv6 addresses within this range are also utilized by other networks, such as NeoNetwork employing fd10:127::/32[21] and CRXN utilizing segments of fd00::/8.[22]

AS numbers

edit

In order to use BGP, even in a private environment, autonomous system numbers are needed. dn42 uses several private or reserved AS number ranges, including 64512 to 64855 and 76100 to 76199.[23] Since June 2014, dn42 is now using a new private range, 4242420000 to 4242429999,[24] part of larger private range defined by RFC 6996.

BGP routers

edit

While some participants use hardware routers, most participants use general purpose servers or virtual machines to lower their cost. The most commonly used BGP implementations used in dn42 are BIRD and FRR, but some participants use OpenBGPD, XORP, GoBGP or the implementation of JunOS, Cisco IOS, MikroTik's RouterOS or VyOS (which uses FRR as a routing daemon in the background).[25]

Tunneling

edit

In dn42, various links are used between the participants - but mainly virtual links, also known as tunnels. WireGuard is most commonly used for this, as it is easy to configure and is considered secure (with Perfect Forward Secrecy). Furthermore, many automatic peering systems offer WireGuard as the only option.[26] fastd is used for peering with the IC-VPN.[27] In rare cases, OpenVPN or IPsec are also used.

DN42 TLD

edit

Websites and services hosted on the Dn42 network often use the top-level domain dn42. This is not an official IANA top-level domain, and it is handled through the dn42 registry.

Registry

edit

To ensure uniform administration of IP addresses and domains, there is also a registry in dn42, as in Clearnet. This is based on Git[28] in dn42 and therefore also offers the option of storing these in a decentralized manner. Furthermore, all changes can be clearly traced back to an author. To make a change in the dn42 (e.g. a registration[29]), a pull request is created with the corresponding change. One of the registry maintainers then looks at this, validates it (including syntactically) and also verifies it (checking the authorization and signature). A participant must be authorized to make a change. This is verified by a signature using a GPG or SSH key.[30]

Interconnections

edit

The dn42 maintains a number of links to similar projects:[31]

Name v4 v6 TLD
NeoNetwork X X .neo
Freifunk IC-VPN X X Various
ChaosVPN X X .hack
CRXN[32] X .crxn

Certificate Authority

edit

The dn42 has its own (unofficial) Certificate Authority (CA).[33] This can be used to issue TLS certificates, for example for HTTPS. Ownership can be verified with ACME, as with Let's Encrypt.

In addition, the NeoNetwork also operates its own CA for the .neo TLD and the associated network area.[34] The ChaosVPN, IC-VPN and the CRXN do not have a CA. In order to prevent the CA from issuing certificates for Clearnet addresses, name constraints[35] are used which limit the name validity range of the CA. This means that the CA cannot be used for Clearnet addresses.

Services

edit

The following is a selection of services in the dn42:

Service v4 v6 DNS
Recursive Anycast DNS 172.20.0.53 fd42:d42:d42:54::1 a0.recursive-servers.dn42
Recursive Anycast DNS 172.23.0.53 fd42:d42:d42:53::1 a3.recursive-servers.dn42
Basic "What is my IP service"-Service 172.20.0.81 fd42:d42:d42:81::1 http://myip.dn42/
dn42 wiki 172.23.0.80 fd42:d42:d42:80::1 https://wiki.dn42/ / https://internal.dn42/
Global Route Collector 172.20.129.4 fd42:4242:2601:ac12::1 collector.dn42

Notes

edit
  1. ^ Abbreviation of Decentralized network 42

References

edit
  1. ^ "Home". dn42.dev. Retrieved 2024-01-06.
  2. ^ Tian, Lan. "DN42 Experimental Network: Intro and Registration (Updated 2022-12)". Lan Tian @ Blog. Retrieved 2024-01-06.
  3. ^ "Prelude: Connecting to the DN42 Overlay Network". www.jamieweb.net. Retrieved 2024-01-06.
  4. ^ Usman (2021-11-22). "DN42 Part 1: Connecting to the DN42 BGP Mesh". Usman. Retrieved 2024-01-06.
  5. ^ "DN42 Realtime Map". map.meson.cc. Retrieved 2024-09-24.
  6. ^ "DN42 Realtime Network Map". map.kuu.moe. Retrieved 2024-09-24.
  7. ^ "Multiple servers on dn42: iBGP and IGPs | jlu5". jlu5.com. Retrieved 2024-01-06.
  8. ^ "dn42". 2016-03-14. Archived from the original on 2016-03-14. Retrieved 2024-09-24.
  9. ^ "dn42 - decentralized network". 2009-02-07. Archived from the original on 2009-02-07. Retrieved 2024-09-24.
  10. ^ "C3D2VPN – C3D2". wiki.c3d2.de. Retrieved 2024-09-25.
  11. ^ "diac24.net". 2004-02-10. Archived from the original on 2004-02-10. Retrieved 2024-09-24.
  12. ^ "diac24.net". 2004-02-10. Archived from the original on 2004-02-10. Retrieved 2024-09-24.
  13. ^ "IPv4Topologie – dn42 - decentralized network". 2009-05-30. Archived from the original on 2009-05-30. Retrieved 2024-09-24.
  14. ^ "IPv6Topologie – dn42 - decentralized network". 2009-05-30. Archived from the original on 2009-05-30. Retrieved 2024-09-24.
  15. ^ "ASTopologie – dn42 - decentralized network". 2009-05-30. Archived from the original on 2009-05-30. Retrieved 2024-09-24.
  16. ^ "TunnelTopologie – dn42 - decentralized network". 2009-05-30. Archived from the original on 2009-05-30. Retrieved 2024-09-24.
  17. ^ "Topologie – dn42 - decentralized network". 2009-02-07. Archived from the original on 2009-02-07. Retrieved 2024-09-24.
  18. ^ "HowToPeer – dn42". 2016-03-14. Archived from the original on 2016-03-14. Retrieved 2024-09-24.
  19. ^ a b "Address-Space". dn42.dev. Retrieved 2024-09-24.
  20. ^ "ICVPN IP ranges". GitHub. Retrieved 19 April 2021.
  21. ^ a b "NeoNetwork Github Repo". GitHub. Archived from the original on 2020-11-22.
  22. ^ "Prefix allocation and registration - CRXN". CRXN project homepage. Archived from the original on 2023-09-24. Retrieved 2024-01-06.
  23. ^ "Frequently Asked Questions". Retrieved 19 April 2021.
  24. ^ "AS numbers". Retrieved 19 April 2021.
  25. ^ "What BGP daemon should I use?". Retrieved 22 April 2018.
  26. ^ "[DN42 Peering] Kioubit-Network". dn42.g-load.eu. Retrieved 2024-09-24.
  27. ^ "Fastd – wiki.freifunk.net". wiki.freifunk.net. Retrieved 2024-09-24.
  28. ^ "FAQ". dn42.dev. Retrieved 2024-01-06.
  29. ^ "Getting-Started". dn42.dev. Retrieved 2024-01-06.
  30. ^ "Registry-Authentication". dn42.dev. Retrieved 2024-01-06.
  31. ^ "Interconnections". dn42.dev. Retrieved 2024-01-06.
  32. ^ Velloza Kildaire, Tristan B. (2023-01-31). "Announcing the CRXNxDN42 inter-connect!". Announcing the CRXNxDN42 inter-connect!. Archived from the original on 2023-09-24. Retrieved 2024-01-06.
  33. ^ "Certificate-Authority". dn42.dev. Retrieved 2024-01-06.
  34. ^ "NeoNetwork/ca/neonetwork.crt at master · NeoCloud/NeoNetwork". GitHub. Retrieved 2024-01-06.
  35. ^ "Certificate-Authority". dn42.dev. Retrieved 2024-01-06.
edit
Retrieved from "https://en.wikipedia.org/w/index.php?title=Dn42&oldid=1255605305"