amal/ungleich-staticcms
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'master' of git+ssh://code.ungleich.ch/ungleich-public/ungleich-staticcms

Browse source
This commit is contained in:
sanghee 2020-11-04 15:56:00 +01:00
commit d39f65977f
7 changed files with 330 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
assets/u/image/openwrt.svg Normal file
View file

File diff suppressed because one or more lines are too long
Side by side

After

Width:  |  Height:  |  Size: 15 KiB

49
content/u/blog/DRAFT-2020-incompatible-without-ipv6/contents.lr Normal file
View file

@ -0,0 +1,49 @@
title: 2020 incompatible: without IPv6
---
pub_date: 2020-10-16
---
author: ungleich
---
twitter_handle: ungleich
---
_hidden: no
---
_discoverable: no
---
abstract:
2020 is the year of IPv6 - are you ready for it?
---
body:
## TL;DR
As of 2020-10-16 we will start to label software and hardware that is not fully IPv6 compatible
as "2020 incompatible". And we encourage everyone to join.
## Background
Latest with the [exhaustion of IPv4 space at
RIPE](https://www.ripe.net/publications/news/about-ripe-ncc-and-ripe/the-ripe-ncc-has-run-out-of-ipv4-addresses),
it has become a necessity to switch to IPv6 in 2020.
Additionally IPv4 address have become a very scarce and expensive
resource. Not only in buying the actual addresses, but also to keep
the legacy IP stack active and maintained.
## 2020: Switching to IPv6 only networks
Running dual stack networks is not feasible, because you do not profit
from the advantages of IPv6, but suffer from complexity in your
network.
Dual stack networks also limit the scope of IPv6 implementation, as
layouts are orientated on legacy network designs. So in a nutshell: If
you want to make your life easier and your operations less cost
intensive, you switch to IPv6 only networks.
## Blocker for the IPv6 only migration
We argue that there is no practical blocker anymore for moving to IPv6
only networks, because even reachability from the IPv4 Internet can
easily be achieved using [IPv4-to-IPv6
proxies](/u/products/ipv4-to-ipv6-proxy/) or

26
content/u/blog/DRAFT-blocking-source-address-spoofing/contents.lr Normal file
View file

@ -0,0 +1,26 @@
title: Blocking Source Address Spoofing
---
pub_date: 2020-10-23
---
author: ungleich
---
twitter_handle: ungleich
---
_hidden: yes
---
_discoverable: no
---
abstract:
Let's not let the wrong packets in.
---
body:
## TL;DR
Effective 2020-10-23 we drop source address spoofed packets in Data
Center Light.
## Introduction
We have received a very helpful hint from a group of researchers that
spoofed packets from our own

87
content/u/blog/the-ipv6-eye-a-proper-ipv6-camera/contents.lr Normal file
View file

@ -0,0 +1,87 @@
title: The IPv6-eye: a proper IPv6 camera
---
pub_date: 2020-11-04
---
author: ungleich
---
twitter_handle: ungleich
---
_hidden: no
---
_discoverable: yes
---
abstract:
Looking for an IPv6 camera? Do not look any further.
---
body:
## TL;DR
At ungleich we have created an IPv6 camera that brings its own IPv6
connectivity. And a world wide reachable name. We are
currently
[crowdfunding](https://swiss-crowdfunder.com/campaigns/the-1000-eyes-project/)
the production of the first 100 cameras.
## A real IPv6 camera?
What is the advantage of IPv6 again? Exactly, world wide reachability
without any hacks or quirks.
To support this, we have not only created a camera **that works within
IPv6 (only) networks**. No, we took it one step further: The
**IPv6-eye** is an IPv6 camera that **brings its own IPv6
connectivity**.
On top of all of this, we created the [1000ey.es](https://1000ey.es)
project that even **gives a cool name** to every IPv6 camera in the world.
## How to use the IPv6-eye
It is very simple:
* plugin a network cable with Internet uplink
* connect it to power
* It works!
After that you can ...
* Point the camera to what you want to show
* Visit *yourname*.1000ey.es:8081 (you can find an example on
[mountains-diesbach.1000ey.es](http://mountains-diesbach.1000ey.es:8081/)
* Optionally configure it to connect to your existing wifi network
## How does the IPv6-eye work?
But what happens under the hood? The IPv6-eye is based on a similar
concept as the [VIIRB](/u/products/viirb-ipv6-box). The IPv6-eye
uses the [IPv6VPN](https://IPv6VPN.ch) to acquire IPv6
connectivity. This works in IPv4 only, IPv6 only and dual stack networks.
From that moment on, the camera is world wide reachable.
## A name for every IPv6 camera out there
However, people do not like to type IP addresses. Not IPv4, not
IPv6. For this reason you can choose a name below the domain
**1000ey.es** for your camera. This offer is for free on top of the
actual hardware.
## Fully Open Source
Like the VIIRB, the whole stack is fully Open Source. The
operating system is OpenWRT. The VPN software is wireguard. And the
video streaming server is based on mjpg-streamer or motion (still has
to be decided for the final shipment). All files that are required to
configure the IPv6-eye can be found in the [ungleich-tools
repository](https://code.ungleich.ch/ungleich-public/ungleich-tools).
## Crowdfunding the production
As it is usual for the production process to start at a minimum size,
we aim to crowdfund the first 100 units. If we exceed the minimum goal
of 100 IPv6 eyes, we have added some extra goodies as an option.
Checkout the [crowdfunding
campaign](https://swiss-crowdfunder.com/campaigns/the-1000-eyes-project/)
for more details.

32
content/u/products/ipv6-hardware/contents.lr
View file

@ -51,7 +51,7 @@ support to you.
<th>Operating System</th>
</tr>
<tr>
<td><a href="/u/products/viirb-ipv6-box/">VIIRB</a></td>
<td><a href="/u/products/viirb-ipv6-box/">VIIRB (58)</a></td>
<td>The world's smallest IPv6 router</td>
<td>yes</td>
<td>no</td>
@ -61,7 +61,18 @@ support to you.
<td><a href="https://openwrt.org/toh/hwdata/vocore/vocore_vocore2">OpenWRT</a></td>
</tr>
<tr>
<td><a href="/u/products/wib-ipv6-box/">WIVIRB</a></td>
<td><a
href="/u/products/viirb-ipv6-box/">Wired-IPv6-Camera (83)</a></td>
<td>IPv6 Video Streaming (1280x720)</td>
<td>optional</td>
<td>no</td>
<td>1x 100Mbit/s</td>
<td>add-on</td>
<td>N/A</td>
<td><a href="https://openwrt.org/toh/hwdata/vocore/vocore_vocore2">OpenWRT</a></td>
</tr>
<tr>
<td><a href="/u/products/wib-ipv6-box/">WIVIRB (73)</a></td>
<td>Tiny WiFi enabled IPv6 router</td>
<td>yes</td>
<td>yes</td>
@ -71,7 +82,18 @@ support to you.
<td><a href="https://openwrt.org/toh/tp-link/tl-wr902ac_v3">OpenWRT</a></td>
</tr>
<tr>
<td><a href="/u/products/wib-ipv6-box/">FIVIRB</a></td>
<td><a
href="/u/products/viirb-ipv6-box/">Wireless-IPv6-Camera (98)</a></td>
<td>IPv6 Video Streaming (1280x720)</td>
<td>optional</td>
<td>yes</td>
<td>1x 100Mbit/s</td>
<td>add-on</td>
<td>N/A</td>
<td><a href="https://openwrt.org/toh/tp-link/tl-wr902ac_v3">OpenWRT</a></td>
</tr>
<tr>
<td><a href="/u/products/wib-ipv6-box/">FIVIRB (79)</a></td>
<td>Fast and Small IPv6 router</td>
<td>yes</td>
<td>no</td>
@ -81,7 +103,7 @@ support to you.
<td><a href="https://openwrt.org/toh/tp-link/tl-wr902ac_v3">OpenWRT</a></td>
</tr>
<tr>
<td><a href="/u/products/pib-ipv6-box/">PIB</a></td>
<td><a href="/u/products/pib-ipv6-box/">PIB (300)</a></td>
<td>Professional IPv6 Router</td>
<td>yes</td>
<td>yes</td>
@ -111,7 +133,7 @@ support to you.
<td><a href="https://openwrt.org/toh/ubiquiti/unifiac">OpenWRT</a></td>
</tr>
<tr>
<td><a href="/u/products/pib-ipv6-box/">WIAPLR</a></td>
<td><a href="/u/products/pib-ipv6-box/">WIAPPRO</a></td>
<td>IPv6 compatible Wifi Access Point</td>
<td>optional</td>
<td>1300 Mbit/s (5Ghz), 450 Mbit/s (2.4 Ghz)</td>

128
content/u/projects/1000eyes/contents.lr Normal file
View file

@ -0,0 +1,128 @@
title: The 1000 eyes project
---
subtitle: Let's connect back - digitally
---
_hidden: yes
---
_discoverable: no
---
description1:
## What is the 1000 eyes project?
2020 has been a difficult year for everyone. Lockdowns, sickness,
limitations of movement, being unable to see friends and family.
2020 might be the year that we talk about for decades, probably to our
children.
In these times, when we need to social distance to keep others safe,
we can feel isolated, locked in - wanting to go out and meet other
people.
With the 1000eyes project we aim to bring people back together. Safely
and everywhere in the world.
## How does the 1000 eyes project work?
Every **eye** allows you to see one spot in the world. An eye is an
IPv6 enabled camera that is world wide reachable (*). With an eye, you
can view parts of the world. Live and unedited.
There are two options to choose from: Option (A) an eye at your place that you
operate. Or (B) an eye that we operate for you.
### Option (A): An eye for you and your place
### Option (B): An eye operated by ungleich
## How do I connect the eye?
You can either connect the eye via a network cable to your router or
you can connect it via WiFi.
## Meet, talk and exchange ideas
So what if you see a cool eye? Who can you talk to it about? Where can
you announce a trip that you do with your eye?
For this we already created an open exchange platform on the [Open
Chat](/u/projects/open-chat/): simply register at the Open Chat
and then join **1000eyes:ungleich.ch**.
## Financial Goals
### Initial Goal: producing first batch of 100 eyes - 7520 CHF
Let's create the first 100 eyes together. We will setup a website that
lists all available eyes and allows you to select an individual eye
for viewing.
### Stretch Goal #1: 20'000 CHF
If we are able to produce a bigger amount, we will be able to add
a battery and solar panel option to allow your eye to function without
external power source for some time. Our current tested option
includes a 30000mAh battery and a 1.65W solar panel. The estimated
price for this add-on is 75 CHF (the exact price will be communicated
once we passed this stretch goal).
### Stretch Goal #3: 50'000 CHF
This is roughly 500 eyes distributed in the world. Reaching this goal
will allow us to add a 4G/LTE option, allowing your eye to function
even without an Ethernet cable and without WiFi. We are currently
evaluating a partnership that will even allow us to distribute it with
SIM cards in Switzerland. Estimated price for the 4G/LTE extension is
75 CHF (the exact price will be communicated once we passed this stretch goal).
### Stretch Goal 3: 100'000 CHF
If we reach this goal we will add IPv4 proxy support for every eye -
that means every eye will also be accessible from the IPv4 Internet.
Additionally we plan to add more sophisticated filtering and creating
your own collection of eyes on the website - so that you can show your
selection of eyes to your friends and family.
## Tech details
The eyes are based on tested and running on ungleich verified
hardware.
All eyes are
running the Open Source operating system
[OpenWRT](https://openwrt.org/). The camera is a HD (1280x720)
resolution. The eye **does not store**
### The hardware
The eye is based on a MediaTek MT7628AN with
580Mhz, 8 MB Flash and 64 MB RAM. The underlying hardware platform is
a TP-Link TL-WR902AC v3. It has dual band WiFi chip that supports
2.4 Ghz (b/g/n) and 5 Ghz (a/n/ac) networks. The Ethernet port is a
100 Mbit/s port.
### IPv6 Connectivity
All eyes are bringing their own IPv6 connectivity. So you can connect
your eye to any IPv4 or IPv6 network and the eye will use the
[IPv6VPN.ch](https://ipv6vpn.ch) to get its own IPv6 address.
### Fully Open Source
Not only is the operating system fully Open Source, also the process
to create the eyes and to configure is openly available. Because the
eyes are using OpenWRT, you are free to reconfigure the eye to your
need.
### Wireguard included
The eyes use the [Wireguard](https://www.wireguard.com/) protocol to
establish the VPN. If you are reconfiguring or resetting the eye,
ensure that you make a backup of the wireguard private key.
## The footprint / small print
(*) The eyes are only reachable via IPv6. If we reach the If you do not have an IPv6
connection, you can get IPv6 connectivity from the
[IPv6VPN.ch](https://ipv6vpn.ch).

5
content/u/projects/open-chat/contents.lr
View file

@ -21,6 +21,11 @@ To foster IPv6 deployement, we created [IPv6.chat](../ipv6-chat/),
which is also reachable via matrix. Follow above instructions and type
**/join #ipv6:ungleich.ch** instead.
## 1000eyes
Are you interested in the [1000eyes](https://1000ey.es) project? Then
do not hesitate to **/join #1000eyes:ungleich.ch**.
## VIIRB
If you own a [VIIRB](/u/products/viirb-ipv6-box)