tonarino/innernet
Innernet
Innernet est un orchestrateur VPN WireGuard et un plan de contrôle qui automatise le déploiement de tunnels chiffrés entre des pairs distribués. Il fonctionne comme un réseau privé virtuel qui coordonne la découverte des endpoints et distribue les configurations réseau depuis un serveur centralisé pour établir un réseau de superposition privé.
Le système se différencie par un cycle de vie de gestion des pairs structuré, utilisant des fichiers d'invitation à usage unique pour l'onboarding sécurisé et l'échange de clés cryptographiques. Il fournit une segmentation réseau granulaire en organisant les pairs en blocs CIDR nommés, permettant aux administrateurs de restreindre ou d'autoriser le flux de trafic entre des segments réseau logiques spécifiques.
Le projet couvre des capacités plus larges incluant la gestion des accès des pairs, la possibilité de surcharger la découverte automatique des endpoints avec des mappages manuels, et l'injection programmatique de mappages de fichiers hôtes pour la résolution de domaine locale. Sur les systèmes Linux, il interagit directement avec le noyau via des sockets netlink pour programmer les tables de routage et les interfaces réseau.
Features
- Mesh Networking - Automates the distribution of peer endpoints and keys to orchestrate a private encrypted mesh network.
- Mesh VPN Coordination Servers - Operates as a coordination server that manages WireGuard peers and assigns IP addresses for a private overlay mesh network.
- Network Coordination Planes - Functions as a centralized control plane for managing endpoint discovery and distributing network configurations.
- Centralized Configuration Distribution - Provides a central server to synchronize network settings and peer endpoints for automated tunnel setup.
- Peer-to-Peer Networking - Manages the active status of nodes within a peer-to-peer networking model to control their visibility.
- Mesh Network Coordinators - Functions as a coordination server that manages key exchange and topology for the secure mesh network.
- Peer Connection Management - Distributes peer endpoint and configuration data via a central server to facilitate direct connectivity.
- Peer-to-Peer Tunneling - Coordinates endpoint information to establish direct encrypted communication tunnels between peers.
- Access Management - Manages the peer lifecycle through secure registration and status toggles to grant or revoke network access.
- Private Networks - Establishes a secure, isolated private overlay network for encrypted communication between distributed hosts.
- Peer Identity Managers - Manages the peer lifecycle via invitation-based onboarding and active status toggles to control access.
- Remote Device Connectivity - Coordinates endpoint information and IP addresses to establish reliable secure connections between remote machines.
- Virtual Private Networks - Provides a secure communication layer that encrypts traffic between hosts via tunnel implementations.
- WireGuard VPN Orchestrators - Automates the deployment of WireGuard tunnels and manages client configurations from a centralized control plane.
- WireGuard VPN Support - Utilizes the high-performance WireGuard kernel protocol to establish secure, encrypted peer-to-peer tunnels.
- Invitation-Based Onboarding - Registers new network peers and exchanges cryptographic keys using secure, single-use invitation files.
- Network Access Controls - Controls peer network connectivity by enabling or disabling specific nodes through security policies.
- Peer Provisioning - Generates secure invitation files for new nodes to register public keys and join the encrypted network.
- Network Traffic Segmentation - Organizes peers into logical groups using CIDR blocks to restrict or permit inter-segment communication.
- Tunnel Interface Configuration - Configures properties of tunnel interfaces for both kernel and userspace WireGuard implementations.
- Netlink Communication - Uses Linux netlink sockets to program network interfaces and routing tables directly in the kernel.
- CIDR-Based - Implements network-level access restrictions by permitting or restricting traffic flow based on CIDR blocks.
- Overlay Networks - Private network management tool utilizing standard CIDR concepts.
- Network and Transport Security - Creates private networks using WireGuard for secure communication.
- Network Security - Private mesh network overlay using WireGuard.
