yggdrasil-network/yggdrasil-go
Yggdrasil Go
yggdrasil-go is a self-organizing encrypted IPv6 overlay network. It implements a decentralized peer routing system that uses public-key-based addressing to link identity and location, allowing the network to automatically discover paths and manage connectivity without central authority.
The system provides transport-agnostic peering and multi-circuit redundancy, maintaining several concurrent connections to a single peer to ensure high availability. It supports prefix-based route advertisement, which enables the routing of dedicated IPv6 subnets to non-participating devices through the encrypted overlay.
The project covers a broad range of networking capabilities, including multicast peer discovery, encrypted traffic routing over TCP and TLS, and dynamic network connectivity maintenance. Security is managed through collision-resistant key generation and peer connection restrictions based on authorized public keys.
Management utilities are included for network interface configuration, node metadata publishing, and converting configuration formats between HJSON and JSON.
Features
- Cryptographic IPv6 Networking - Implements an IPv6 networking layer where addresses are cryptographically linked to public key identities.
- Multi-Circuit Peer Redundancy - Maintains several concurrent connections to a single peer to ensure high availability and failover.
- IPv6 Prefix Advertisements - Broadcasting of IPv6 network prefixes to enable external connectivity for non-participating devices.
- High Availability Networking - Ensures continuous connectivity through redundant routing paths and interface prioritization.
- Encrypted Peer Link Establishment - Establishes encrypted links between nodes via standard transport protocols to build a secure network overlay.
- Concurrent Multi-Circuit Peering - Creates multiple concurrent connections to the same peer across different circuits to ensure high availability.
- Multi-Peer Routing - Manages multiple encrypted peer connections with IP-range based routing in a decentralized manner.
- Self-Organizing Routing - Automatically discovers network paths and manages peer connectivity without requiring manual configuration of every hop.
- IPv4 and IPv6 Unicast and Multicast Routing - Routes end-to-end encrypted IPv6 traffic between network participants across diverse topologies.
- Collision-Resistant Address Generation - Produces public keys that result in IPv6 addresses and prefixes designed to be exceptionally difficult to collide.
- IPv6 Address Derivations - Generates routable IPv6 network addresses from public keys using cryptographic hashing.
- Dynamic Path Healing - Automatically adapts to connection failures and mobility events to maintain continuous network availability.
- Local Peer Discovery - Identifies and connects to nearby nodes on the local network using multicast beaconing.
- Network Listeners - Opens network listeners on specific addresses to accept peering requests using multiple protocols.
- Overlay Networks - Creates and manages a secure virtual network layer using encrypted tunnels for private communication.
- Node Peering Restrictions - Limits incoming peering requests to a whitelist of authorized public keys to control network membership.
- Connectivity Establishment - Establishes links to remote nodes using various transport protocols and optional encryption.
- Pluggable Transport Connections - Manages raw connections between peers using interchangeable transport protocols like TCP or TLS.
- TCP Transport Connections - Implements reliable peer-to-peer connectivity using TCP as the underlying transport protocol.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
