diff --git a/assets/u/image/openwrt.svg b/assets/u/image/openwrt.svg new file mode 100644 index 0000000..9665031 --- /dev/null +++ b/assets/u/image/openwrt.svg @@ -0,0 +1,8 @@ + + + + + + + + diff --git a/assets/u/image/viirb-vertical.jpg b/assets/u/image/viirb-vertical.jpg new file mode 100644 index 0000000..6230597 Binary files /dev/null and b/assets/u/image/viirb-vertical.jpg differ diff --git a/content/u/blog/DRAFT-2020-incompatible-without-ipv6/contents.lr b/content/u/blog/DRAFT-2020-incompatible-without-ipv6/contents.lr new file mode 100644 index 0000000..a97cbe3 --- /dev/null +++ b/content/u/blog/DRAFT-2020-incompatible-without-ipv6/contents.lr @@ -0,0 +1,49 @@ +title: 2020 incompatible: without IPv6 +--- +pub_date: 2020-10-16 +--- +author: ungleich +--- +twitter_handle: ungleich +--- +_hidden: no +--- +_discoverable: no +--- +abstract: +2020 is the year of IPv6 - are you ready for it? +--- +body: + +## TL;DR + +As of 2020-10-16 we will start to label software and hardware that is not fully IPv6 compatible +as "2020 incompatible". And we encourage everyone to join. + +## Background + +Latest with the [exhaustion of IPv4 space at +RIPE](https://www.ripe.net/publications/news/about-ripe-ncc-and-ripe/the-ripe-ncc-has-run-out-of-ipv4-addresses), +it has become a necessity to switch to IPv6 in 2020. + +Additionally IPv4 address have become a very scarce and expensive +resource. Not only in buying the actual addresses, but also to keep +the legacy IP stack active and maintained. + +## 2020: Switching to IPv6 only networks + +Running dual stack networks is not feasible, because you do not profit +from the advantages of IPv6, but suffer from complexity in your +network. + +Dual stack networks also limit the scope of IPv6 implementation, as +layouts are orientated on legacy network designs. So in a nutshell: If +you want to make your life easier and your operations less cost +intensive, you switch to IPv6 only networks. + +## Blocker for the IPv6 only migration + +We argue that there is no practical blocker anymore for moving to IPv6 +only networks, because even reachability from the IPv4 Internet can +easily be achieved using [IPv4-to-IPv6 +proxies](/u/products/ipv4-to-ipv6-proxy/) or diff --git a/content/u/blog/DRAFT-blocking-source-address-spoofing/contents.lr b/content/u/blog/DRAFT-blocking-source-address-spoofing/contents.lr new file mode 100644 index 0000000..63e3460 --- /dev/null +++ b/content/u/blog/DRAFT-blocking-source-address-spoofing/contents.lr @@ -0,0 +1,26 @@ +title: Blocking Source Address Spoofing +--- +pub_date: 2020-10-23 +--- +author: ungleich +--- +twitter_handle: ungleich +--- +_hidden: yes +--- +_discoverable: no +--- +abstract: +Let's not let the wrong packets in. +--- +body: + +## TL;DR + +Effective 2020-10-23 we drop source address spoofed packets in Data +Center Light. + +## Introduction + +We have received a very helpful hint from a group of researchers that +spoofed packets from our own diff --git a/content/u/products/ipv6-hardware/contents.lr b/content/u/products/ipv6-hardware/contents.lr new file mode 100644 index 0000000..dce0562 --- /dev/null +++ b/content/u/products/ipv6-hardware/contents.lr @@ -0,0 +1,418 @@ +_discoverable: no +--- +_hidden: no +--- +title: IPv6 Hardware List +--- +subtitle: Enabling your network with IPv6 +--- +headline1: IPv6 Hardware List +--- +headline2: IPv6 Routers - IPv6 VPN +--- +headline3: IPv6 WiFi - IPv6 Cameras +--- +header_background_color: #1BC0A1 +--- +header_text_color: text-light +--- +nav_classes: navbar-dark +--- +description1: + +

IPv6 Hardware List

+ +

+We at ungleich provide a variety of IPv6 only services. Through the +years we have tested, retested, flashed, upgraded and tested again a +lot of hardware.
+ +We want to allow that our IPv6 experiences are a value for everyone +interested in IPv6 networking.
+ +For some devices we have taken the opportunity to replace the original +firmware with OpenWRT to give full networking freedom and full IPv6 +support to you. + +

+ +
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
DeviceDescriptionIPv6VPNWiFiEthernet4G/LTEWireguard SpeedOperating System
VIIRB (58)The world's smallest IPv6 routeryesno1x 100Mbit/sadd-on?OpenWRT
Wired-IPv6-Camera (83)IPv6 Video Streaming (1280x720)optionalno1x 100Mbit/sadd-onN/AOpenWRT
WIVIRB (73)Tiny WiFi enabled IPv6 routeryesyes1x 100Mbit/sadd-on?OpenWRT
Wireless-IPv6-Camera (98)IPv6 Video Streaming (1280x720)optionalyes1x 100Mbit/sadd-onN/AOpenWRT
FIVIRB (79)Fast and Small IPv6 routeryesno5x 1 Gbit/s, POEno200Mbit/sOpenWRT
PIB (300)Professional IPv6 Routeryesyes3x 1 Gbit/sadd-on?OpenWRT
WIAPLITEIPv6 compatible Wifi Access Pointoptional867 Mbit/s (5Ghz), 300 Mbit/s (2.4 Ghz)1x 1 Gbit/sno?OpenWRT
WIAPLRIPv6 compatible Wifi Access Pointoptional866 Mbit/s (5Ghz), 450 Mbit/s (2.4 Ghz)1x 1 Gbit/sno?OpenWRT
WIAPPROIPv6 compatible Wifi Access Pointoptional1300 Mbit/s (5Ghz), 450 Mbit/s (2.4 Ghz)1x 1 Gbit/sno?OpenWRT
+
+
+
+ +Additional to support IPv6 properly, due to OpenWRT the devices also +support: + +* prometheus + + +
+
+
+ +
+
+
    +
  • + The strongest point of Matrix is federation: a Matrix homeserver allows you to manage your own community and to join the whole + Matrix network. You will be able to exchange with users on any other Matrix + server without any special configuration! +
    • +
  • + You can enable end-to-end encryption (E2EE): only the sender and + intended receiver(s) will be able to read the messages. Even ungleich, who + manages the matrix server, will not be able to access the content of E2EE + messages. +
    • +
  • + Our Matrix servers are provided with a TURN server: you'll be + able to use voice and video calls out of the box. +
    • +
  • + You can bridge to other networks: Mattermost instances, IRC, + Slack, Telegram and more via Matterbridge. +
    • +
+
+
+
+ +
+ +--- +feature1_title: Open +--- +feature1_text: + +The evolution of Matrix is managed through an open governance process, +supervised by [The Matrix.org Foundation](https://matrix.org/foundation). +All the software backing the network is [Free and Open +Source](https://en.wikipedia.org/wiki/Free_and_open-source_software), which +guarantees quality and security. + +--- +feature2_title: Secure & decentralized +--- +feature2_text: + +Both end-to-end encryption and federation are *built-in* into Matrix. The +former will be enabled by default in the near future, making it a valuable tool +for activists and privacy-minded people all across the world. + +--- +feature3_title: Zero Carbon +--- +feature3_text: +We host your Matrix homeserver in our [own +datacenter](/u/projects/data-center-light/) in Switzerland, which we believe to +be as ecologically-friendly as a datacenter can get: we use old factory halls, +recycled servers, passive cooling and our servers are directly plugged into a +hydroelectric power plant. + +--- +description3: + +
+
+
+ +
+
+

Growing fast!

+

As of February 2020, the Matrix network supports ~13.5M visible + accounts, ~5.0M messages a day, ~40.000 federated servers and even governments!

+ +

A lot of privacy, security and usability work is going on: Matrix will get even more awesome in the coming months!

+ +

You can follow the Matrix.org + blog to get frequent updates on Matrix's development, and chat with + us on #matrix:ungleich.ch! +

+
+
+ +
+ +
+
+
+

Hosted Matrix Chat

+ +

We will provide you with your own dedicated Matrix home server, as well as + a hosted web client. Matrix requires a domain name in order to join the global + networks, which will appear in your username (e.g. + @penguin:example.0co2.cloud): you can either use a subdomain of + 0co2.cloud (e.g. example.0co2.cloud) or your own domain name. We + will deploy a Matterbridge) + instance (bridging to Mattermost, IRC, Slack, Telegram, ...) on demand. +

+ +

There are many Matrix + clients, although we strongly recommend Riot which is the most + advanced at the moment. Be aware, however, that you might be a bit + confused with its UI/UX at first (there is ongoing work to improve + onboarding): we encourage you to try + Riot/Matrix first if your are not already familiar with it. +

+ +
+
+

How the pricing works

+ +

We try to be as transparent as possible for our Matrix pricing. The pricing is made of 2 essential parts. +

+
    +
  • + a one-time set up fee for initially setting up the Matrix instance for you. We set up the Matrix and also customize* the login page with your own logo and text. +
    • +
  • + a monthly maintenance fee that includes the price of a dedicated virtual machine(VM)** and the fee for maintaining the service. +
    • +
+

+ You're all set with above 2 costs for starting your own Matrix. +

+ +

+ * Further customization such as favicon, background and more is possible at additional fee, get in touch with us to learn more. +

+

+ ** The number of users or size of rooms depend on the size of your VM, and you can scale them anytime you want. The extention will be done according to our standard VM pricing. +

+ + +
+ Your usecase doesn't fit the offers below? We do custom-sized deployment for you. Get in touch with us by + email or even on matrix, via #matrix:ungleich.ch! +
+
+
+ +

You will find more details +on our Matrix-as-a-Service FAQ and on Matrix's official documentation. +

+ +
+You might be also interested in our Mattermost-based chat offer, which might be +closer to what you expect for a enterprise team chat at the moment. We use both +at ungleich, since Matrix is especially convenient to reach out to the world! +
+ +--- +offer1_title: Matrix-S 36 CHF/Month +--- +offer1_text: + +* VM with 1 Core, 2 GB RAM, 10 GB SSD and 100 GB HDD +* Maintenance fee 20 CHF/month included +* Application firewall included +* [Initial setup fee 30 CHF](https://ungleich.ch/product/0carbonchat-setup/) + +--- +offer1_link: https://ungleich.ch/product/hosted-matrix-s/ +--- +offer2_title: Matrix-M 63 CHF/Month +--- +offer2_text: + +* VM with 2 Core, 4 GB RAM, 10 GB SSD and 500 GB HDD +* Maintenance fee 30 CHF/month included +* Application firewall included +* [Initial setup fee 30 CHF](https://ungleich.ch/product/0carbonchat-setup/) + + +--- +offer2_link: https://ungleich.ch/product/hosted-matrix-m/ +--- +offer3_title: Matrix-L 157 CHF/Month +--- +offer3_text: + +* VM with 8 Core, 16 GB RAM, 10 GB SSD and 1000 GB HDD +* Maintenance fee 50 CHF/month included +* Application firewall included +* [Initial setup fee 30 CHF](https://ungleich.ch/product/0carbonchat-setup/) + + +--- +offer3_link: https://ungleich.ch/product/hosted-matrix-l/ +--- +description4: + +## Additional offers + +* Bridging to other networks using + [matterbridge](https://github.com/42wim/matterbridge) is a 10 CHF + setup fee and 5 CHF/month maintenance fee. It supports the following protocols: +** Discord +** Gitter +** IRC +** Keybase +** Matrix +** Mattermost 4.x, 5.x +** Microsoft Teams +** Rocket.chat +** Slack +** Ssh-chat +** Steam +** Telegram +** Twitch +** WhatsApp +** XMPP +** Zulip + +## Matrix UI/UX development support program + +On 2020-04-21 we started our new support program to specifically +enhance the UI and UX of Matrix. With this program we want to enhance +the usability of the web client and the apps. + +### How the matrix support program works + +If you want to support UI/UX improvements of Matrix, +you can support the work financially with 15 CHF (roughly about 15 +USD) as a one time or monthly payment (below 15 CHF is costing too +much in transfer fees). + +To do so, write an email with the subject "I want to support the +Matrix UI/UX improvements" to **support -at- ungleich.ch** and include +the amount that you are willing to contribute and whether you want to +pay via credit card or wire transfer. + +Also mention whether you want to be publicly listed as a supporter on +this website. + +### Development and transparency + +All money that comes in will only be used to finance development and +design work related to Matrix. We will continuously +update this website with contributions and which tasks we work on. + +### Why is ungleich doing this? + +We at ungleich think that Matrix has one really, really huge edge over +almost all other solutions: it is really decentralised and +federated. It finally solves the problems of **data silos** that +exists in many places in IT. + +However we do acknowledge that Matrix can benefit a lot from UI/UX +improvements and thus we wanted to create an easy way for anyone to +contribute to it. + +### List of tasks / work + +* [UI/UX improvement suggestions for + matrix](https://redmine.ungleich.ch/issues/7876) diff --git a/content/u/products/viirb-ipv6-box/contents.lr b/content/u/products/viirb-ipv6-box/contents.lr index 1039fcc..e648ba3 100644 --- a/content/u/products/viirb-ipv6-box/contents.lr +++ b/content/u/products/viirb-ipv6-box/contents.lr @@ -8,7 +8,7 @@ subtitle: The VIIRB connects anything anywhere with IPv6. --- image: /u/image/cards/viirb.jpg --- -content1_image: /u/image/viirb-ipv6-box.png +content1_image: /u/image/viirb-vertical.jpg --- content1_text: diff --git a/content/u/projects/1000eyes/contents.lr b/content/u/projects/1000eyes/contents.lr new file mode 100644 index 0000000..7b726e3 --- /dev/null +++ b/content/u/projects/1000eyes/contents.lr @@ -0,0 +1,128 @@ +title: The 1000 eyes project +--- +subtitle: Let's connect back - digitally +--- +_hidden: yes +--- +_discoverable: no +--- +description1: + +## What is the 1000 eyes project? + +2020 has been a difficult year for everyone. Lockdowns, sickness, +limitations of movement, being unable to see friends and family. + +2020 might be the year that we talk about for decades, probably to our +children. + +In these times, when we need to social distance to keep others safe, +we can feel isolated, locked in - wanting to go out and meet other +people. + +With the 1000eyes project we aim to bring people back together. Safely +and everywhere in the world. + +## How does the 1000 eyes project work? + +Every **eye** allows you to see one spot in the world. An eye is an +IPv6 enabled camera that is world wide reachable (*). With an eye, you +can view parts of the world. Live and unedited. + +There are two options to choose from: Option (A) an eye at your place that you +operate. Or (B) an eye that we operate for you. + +### Option (A): An eye for you and your place + +### Option (B): An eye operated by ungleich + +## How do I connect the eye? + +You can either connect the eye via a network cable to your router or +you can connect it via WiFi. + +## Meet, talk and exchange ideas + +So what if you see a cool eye? Who can you talk to it about? Where can +you announce a trip that you do with your eye? + +For this we already created an open exchange platform on the [Open +Chat](/u/projects/open-chat/): simply register at the Open Chat +and then join **1000eyes:ungleich.ch**. + +## Financial Goals + +### Initial Goal: producing first batch of 100 eyes - 7520 CHF + +Let's create the first 100 eyes together. We will setup a website that +lists all available eyes and allows you to select an individual eye +for viewing. + +### Stretch Goal #1: 20'000 CHF + +If we are able to produce a bigger amount, we will be able to add +a battery and solar panel option to allow your eye to function without +external power source for some time. Our current tested option +includes a 30000mAh battery and a 1.65W solar panel. The estimated +price for this add-on is 75 CHF (the exact price will be communicated +once we passed this stretch goal). + +### Stretch Goal #3: 50'000 CHF + +This is roughly 500 eyes distributed in the world. Reaching this goal +will allow us to add a 4G/LTE option, allowing your eye to function +even without an Ethernet cable and without WiFi. We are currently +evaluating a partnership that will even allow us to distribute it with +SIM cards in Switzerland. Estimated price for the 4G/LTE extension is +75 CHF (the exact price will be communicated once we passed this stretch goal). + +### Stretch Goal 3: 100'000 CHF + +If we reach this goal we will add IPv4 proxy support for every eye - +that means every eye will also be accessible from the IPv4 Internet. + +Additionally we plan to add more sophisticated filtering and creating +your own collection of eyes on the website - so that you can show your +selection of eyes to your friends and family. + +## Tech details + +The eyes are based on tested and running on ungleich verified +hardware. +All eyes are +running the Open Source operating system +[OpenWRT](https://openwrt.org/). The camera is a HD (1280x720) +resolution. The eye **does not store** + +### The hardware + +The eye is based on a MediaTek MT7628AN with +580Mhz, 8 MB Flash and 64 MB RAM. The underlying hardware platform is +a TP-Link TL-WR902AC v3. It has dual band WiFi chip that supports +2.4 Ghz (b/g/n) and 5 Ghz (a/n/ac) networks. The Ethernet port is a +100 Mbit/s port. + +### IPv6 Connectivity + +All eyes are bringing their own IPv6 connectivity. So you can connect +your eye to any IPv4 or IPv6 network and the eye will use the +[IPv6VPN.ch](https://ipv6vpn.ch) to get its own IPv6 address. + +### Fully Open Source + +Not only is the operating system fully Open Source, also the process +to create the eyes and to configure is openly available. Because the +eyes are using OpenWRT, you are free to reconfigure the eye to your +need. + +### Wireguard included + +The eyes use the [Wireguard](https://www.wireguard.com/) protocol to +establish the VPN. If you are reconfiguring or resetting the eye, +ensure that you make a backup of the wireguard private key. + +## The footprint / small print + +(*) The eyes are only reachable via IPv6. If we reach the If you do not have an IPv6 +connection, you can get IPv6 connectivity from the +[IPv6VPN.ch](https://ipv6vpn.ch). diff --git a/content/u/projects/open-chat/contents.lr b/content/u/projects/open-chat/contents.lr index 577f391..febfb5a 100644 --- a/content/u/projects/open-chat/contents.lr +++ b/content/u/projects/open-chat/contents.lr @@ -21,6 +21,11 @@ To foster IPv6 deployement, we created [IPv6.chat](../ipv6-chat/), which is also reachable via matrix. Follow above instructions and type **/join #ipv6:ungleich.ch** instead. +## 1000eyes + +Are you interested in the [1000eyes](https://1000ey.es) project? Then +do not hesitate to **/join #1000eyes:ungleich.ch**. + ## VIIRB If you own a [VIIRB](/u/products/viirb-ipv6-box)