Merge branch 'master' of git+ssh://code.ungleich.ch/ungleich-public/ungleich-staticcms
This commit is contained in:
sanghee
commit
d39f65977f
File diff suppressed because one or more lines are too long
|
After Width: | Height: | Size: 15 KiB |
|
|
@ -0,0 +1,49 @@
|
|||
title: 2020 incompatible: without IPv6
|
||||
---
|
||||
pub_date: 2020-10-16
|
||||
---
|
||||
author: ungleich
|
||||
---
|
||||
twitter_handle: ungleich
|
||||
---
|
||||
_hidden: no
|
||||
---
|
||||
_discoverable: no
|
||||
---
|
||||
abstract:
|
||||
2020 is the year of IPv6 - are you ready for it?
|
||||
---
|
||||
body:
|
||||
|
||||
## TL;DR
|
||||
|
||||
As of 2020-10-16 we will start to label software and hardware that is not fully IPv6 compatible
|
||||
as "2020 incompatible". And we encourage everyone to join.
|
||||
|
||||
## Background
|
||||
|
||||
Latest with the [exhaustion of IPv4 space at
|
||||
RIPE](https://www.ripe.net/publications/news/about-ripe-ncc-and-ripe/the-ripe-ncc-has-run-out-of-ipv4-addresses),
|
||||
it has become a necessity to switch to IPv6 in 2020.
|
||||
|
||||
Additionally IPv4 address have become a very scarce and expensive
|
||||
resource. Not only in buying the actual addresses, but also to keep
|
||||
the legacy IP stack active and maintained.
|
||||
|
||||
## 2020: Switching to IPv6 only networks
|
||||
|
||||
Running dual stack networks is not feasible, because you do not profit
|
||||
from the advantages of IPv6, but suffer from complexity in your
|
||||
network.
|
||||
|
||||
Dual stack networks also limit the scope of IPv6 implementation, as
|
||||
layouts are orientated on legacy network designs. So in a nutshell: If
|
||||
you want to make your life easier and your operations less cost
|
||||
intensive, you switch to IPv6 only networks.
|
||||
|
||||
## Blocker for the IPv6 only migration
|
||||
|
||||
We argue that there is no practical blocker anymore for moving to IPv6
|
||||
only networks, because even reachability from the IPv4 Internet can
|
||||
easily be achieved using [IPv4-to-IPv6
|
||||
proxies](/u/products/ipv4-to-ipv6-proxy/) or
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
title: Blocking Source Address Spoofing
|
||||
---
|
||||
pub_date: 2020-10-23
|
||||
---
|
||||
author: ungleich
|
||||
---
|
||||
twitter_handle: ungleich
|
||||
---
|
||||
_hidden: yes
|
||||
---
|
||||
_discoverable: no
|
||||
---
|
||||
abstract:
|
||||
Let's not let the wrong packets in.
|
||||
---
|
||||
body:
|
||||
|
||||
## TL;DR
|
||||
|
||||
Effective 2020-10-23 we drop source address spoofed packets in Data
|
||||
Center Light.
|
||||
|
||||
## Introduction
|
||||
|
||||
We have received a very helpful hint from a group of researchers that
|
||||
spoofed packets from our own
|
||||
|
|
@ -0,0 +1,87 @@
|
|||
title: The IPv6-eye: a proper IPv6 camera
|
||||
---
|
||||
pub_date: 2020-11-04
|
||||
---
|
||||
author: ungleich
|
||||
---
|
||||
twitter_handle: ungleich
|
||||
---
|
||||
_hidden: no
|
||||
---
|
||||
_discoverable: yes
|
||||
---
|
||||
abstract:
|
||||
Looking for an IPv6 camera? Do not look any further.
|
||||
---
|
||||
body:
|
||||
|
||||
## TL;DR
|
||||
|
||||
At ungleich we have created an IPv6 camera that brings its own IPv6
|
||||
connectivity. And a world wide reachable name. We are
|
||||
currently
|
||||
[crowdfunding](https://swiss-crowdfunder.com/campaigns/the-1000-eyes-project/)
|
||||
the production of the first 100 cameras.
|
||||
|
||||
## A real IPv6 camera?
|
||||
|
||||
What is the advantage of IPv6 again? Exactly, world wide reachability
|
||||
without any hacks or quirks.
|
||||
|
||||
To support this, we have not only created a camera **that works within
|
||||
IPv6 (only) networks**. No, we took it one step further: The
|
||||
**IPv6-eye** is an IPv6 camera that **brings its own IPv6
|
||||
connectivity**.
|
||||
|
||||
On top of all of this, we created the [1000ey.es](https://1000ey.es)
|
||||
project that even **gives a cool name** to every IPv6 camera in the world.
|
||||
|
||||
## How to use the IPv6-eye
|
||||
|
||||
It is very simple:
|
||||
|
||||
* plugin a network cable with Internet uplink
|
||||
* connect it to power
|
||||
* It works!
|
||||
|
||||
After that you can ...
|
||||
|
||||
* Point the camera to what you want to show
|
||||
* Visit *yourname*.1000ey.es:8081 (you can find an example on
|
||||
[mountains-diesbach.1000ey.es](http://mountains-diesbach.1000ey.es:8081/)
|
||||
* Optionally configure it to connect to your existing wifi network
|
||||
|
||||
## How does the IPv6-eye work?
|
||||
|
||||
But what happens under the hood? The IPv6-eye is based on a similar
|
||||
concept as the [VIIRB](/u/products/viirb-ipv6-box). The IPv6-eye
|
||||
uses the [IPv6VPN](https://IPv6VPN.ch) to acquire IPv6
|
||||
connectivity. This works in IPv4 only, IPv6 only and dual stack networks.
|
||||
|
||||
From that moment on, the camera is world wide reachable.
|
||||
|
||||
## A name for every IPv6 camera out there
|
||||
|
||||
However, people do not like to type IP addresses. Not IPv4, not
|
||||
IPv6. For this reason you can choose a name below the domain
|
||||
**1000ey.es** for your camera. This offer is for free on top of the
|
||||
actual hardware.
|
||||
|
||||
## Fully Open Source
|
||||
|
||||
Like the VIIRB, the whole stack is fully Open Source. The
|
||||
operating system is OpenWRT. The VPN software is wireguard. And the
|
||||
video streaming server is based on mjpg-streamer or motion (still has
|
||||
to be decided for the final shipment). All files that are required to
|
||||
configure the IPv6-eye can be found in the [ungleich-tools
|
||||
repository](https://code.ungleich.ch/ungleich-public/ungleich-tools).
|
||||
|
||||
## Crowdfunding the production
|
||||
|
||||
As it is usual for the production process to start at a minimum size,
|
||||
we aim to crowdfund the first 100 units. If we exceed the minimum goal
|
||||
of 100 IPv6 eyes, we have added some extra goodies as an option.
|
||||
|
||||
Checkout the [crowdfunding
|
||||
campaign](https://swiss-crowdfunder.com/campaigns/the-1000-eyes-project/)
|
||||
for more details.
|
||||
|
|
@ -51,7 +51,7 @@ support to you.
|
|||
<th>Operating System</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/viirb-ipv6-box/">VIIRB</a></td>
|
||||
<td><a href="/u/products/viirb-ipv6-box/">VIIRB (58)</a></td>
|
||||
<td>The world's smallest IPv6 router</td>
|
||||
<td>yes</td>
|
||||
<td>no</td>
|
||||
|
|
@ -61,7 +61,18 @@ support to you.
|
|||
<td><a href="https://openwrt.org/toh/hwdata/vocore/vocore_vocore2">OpenWRT</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/wib-ipv6-box/">WIVIRB</a></td>
|
||||
<td><a
|
||||
href="/u/products/viirb-ipv6-box/">Wired-IPv6-Camera (83)</a></td>
|
||||
<td>IPv6 Video Streaming (1280x720)</td>
|
||||
<td>optional</td>
|
||||
<td>no</td>
|
||||
<td>1x 100Mbit/s</td>
|
||||
<td>add-on</td>
|
||||
<td>N/A</td>
|
||||
<td><a href="https://openwrt.org/toh/hwdata/vocore/vocore_vocore2">OpenWRT</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/wib-ipv6-box/">WIVIRB (73)</a></td>
|
||||
<td>Tiny WiFi enabled IPv6 router</td>
|
||||
<td>yes</td>
|
||||
<td>yes</td>
|
||||
|
|
@ -71,7 +82,18 @@ support to you.
|
|||
<td><a href="https://openwrt.org/toh/tp-link/tl-wr902ac_v3">OpenWRT</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/wib-ipv6-box/">FIVIRB</a></td>
|
||||
<td><a
|
||||
href="/u/products/viirb-ipv6-box/">Wireless-IPv6-Camera (98)</a></td>
|
||||
<td>IPv6 Video Streaming (1280x720)</td>
|
||||
<td>optional</td>
|
||||
<td>yes</td>
|
||||
<td>1x 100Mbit/s</td>
|
||||
<td>add-on</td>
|
||||
<td>N/A</td>
|
||||
<td><a href="https://openwrt.org/toh/tp-link/tl-wr902ac_v3">OpenWRT</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/wib-ipv6-box/">FIVIRB (79)</a></td>
|
||||
<td>Fast and Small IPv6 router</td>
|
||||
<td>yes</td>
|
||||
<td>no</td>
|
||||
|
|
@ -81,7 +103,7 @@ support to you.
|
|||
<td><a href="https://openwrt.org/toh/tp-link/tl-wr902ac_v3">OpenWRT</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/pib-ipv6-box/">PIB</a></td>
|
||||
<td><a href="/u/products/pib-ipv6-box/">PIB (300)</a></td>
|
||||
<td>Professional IPv6 Router</td>
|
||||
<td>yes</td>
|
||||
<td>yes</td>
|
||||
|
|
@ -111,7 +133,7 @@ support to you.
|
|||
<td><a href="https://openwrt.org/toh/ubiquiti/unifiac">OpenWRT</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="/u/products/pib-ipv6-box/">WIAPLR</a></td>
|
||||
<td><a href="/u/products/pib-ipv6-box/">WIAPPRO</a></td>
|
||||
<td>IPv6 compatible Wifi Access Point</td>
|
||||
<td>optional</td>
|
||||
<td>1300 Mbit/s (5Ghz), 450 Mbit/s (2.4 Ghz)</td>
|
||||
|
|
|
|||
|
|
@ -0,0 +1,128 @@
|
|||
title: The 1000 eyes project
|
||||
---
|
||||
subtitle: Let's connect back - digitally
|
||||
---
|
||||
_hidden: yes
|
||||
---
|
||||
_discoverable: no
|
||||
---
|
||||
description1:
|
||||
|
||||
## What is the 1000 eyes project?
|
||||
|
||||
2020 has been a difficult year for everyone. Lockdowns, sickness,
|
||||
limitations of movement, being unable to see friends and family.
|
||||
|
||||
2020 might be the year that we talk about for decades, probably to our
|
||||
children.
|
||||
|
||||
In these times, when we need to social distance to keep others safe,
|
||||
we can feel isolated, locked in - wanting to go out and meet other
|
||||
people.
|
||||
|
||||
With the 1000eyes project we aim to bring people back together. Safely
|
||||
and everywhere in the world.
|
||||
|
||||
## How does the 1000 eyes project work?
|
||||
|
||||
Every **eye** allows you to see one spot in the world. An eye is an
|
||||
IPv6 enabled camera that is world wide reachable (*). With an eye, you
|
||||
can view parts of the world. Live and unedited.
|
||||
|
||||
There are two options to choose from: Option (A) an eye at your place that you
|
||||
operate. Or (B) an eye that we operate for you.
|
||||
|
||||
### Option (A): An eye for you and your place
|
||||
|
||||
### Option (B): An eye operated by ungleich
|
||||
|
||||
## How do I connect the eye?
|
||||
|
||||
You can either connect the eye via a network cable to your router or
|
||||
you can connect it via WiFi.
|
||||
|
||||
## Meet, talk and exchange ideas
|
||||
|
||||
So what if you see a cool eye? Who can you talk to it about? Where can
|
||||
you announce a trip that you do with your eye?
|
||||
|
||||
For this we already created an open exchange platform on the [Open
|
||||
Chat](/u/projects/open-chat/): simply register at the Open Chat
|
||||
and then join **1000eyes:ungleich.ch**.
|
||||
|
||||
## Financial Goals
|
||||
|
||||
### Initial Goal: producing first batch of 100 eyes - 7520 CHF
|
||||
|
||||
Let's create the first 100 eyes together. We will setup a website that
|
||||
lists all available eyes and allows you to select an individual eye
|
||||
for viewing.
|
||||
|
||||
### Stretch Goal #1: 20'000 CHF
|
||||
|
||||
If we are able to produce a bigger amount, we will be able to add
|
||||
a battery and solar panel option to allow your eye to function without
|
||||
external power source for some time. Our current tested option
|
||||
includes a 30000mAh battery and a 1.65W solar panel. The estimated
|
||||
price for this add-on is 75 CHF (the exact price will be communicated
|
||||
once we passed this stretch goal).
|
||||
|
||||
### Stretch Goal #3: 50'000 CHF
|
||||
|
||||
This is roughly 500 eyes distributed in the world. Reaching this goal
|
||||
will allow us to add a 4G/LTE option, allowing your eye to function
|
||||
even without an Ethernet cable and without WiFi. We are currently
|
||||
evaluating a partnership that will even allow us to distribute it with
|
||||
SIM cards in Switzerland. Estimated price for the 4G/LTE extension is
|
||||
75 CHF (the exact price will be communicated once we passed this stretch goal).
|
||||
|
||||
### Stretch Goal 3: 100'000 CHF
|
||||
|
||||
If we reach this goal we will add IPv4 proxy support for every eye -
|
||||
that means every eye will also be accessible from the IPv4 Internet.
|
||||
|
||||
Additionally we plan to add more sophisticated filtering and creating
|
||||
your own collection of eyes on the website - so that you can show your
|
||||
selection of eyes to your friends and family.
|
||||
|
||||
## Tech details
|
||||
|
||||
The eyes are based on tested and running on ungleich verified
|
||||
hardware.
|
||||
All eyes are
|
||||
running the Open Source operating system
|
||||
[OpenWRT](https://openwrt.org/). The camera is a HD (1280x720)
|
||||
resolution. The eye **does not store**
|
||||
|
||||
### The hardware
|
||||
|
||||
The eye is based on a MediaTek MT7628AN with
|
||||
580Mhz, 8 MB Flash and 64 MB RAM. The underlying hardware platform is
|
||||
a TP-Link TL-WR902AC v3. It has dual band WiFi chip that supports
|
||||
2.4 Ghz (b/g/n) and 5 Ghz (a/n/ac) networks. The Ethernet port is a
|
||||
100 Mbit/s port.
|
||||
|
||||
### IPv6 Connectivity
|
||||
|
||||
All eyes are bringing their own IPv6 connectivity. So you can connect
|
||||
your eye to any IPv4 or IPv6 network and the eye will use the
|
||||
[IPv6VPN.ch](https://ipv6vpn.ch) to get its own IPv6 address.
|
||||
|
||||
### Fully Open Source
|
||||
|
||||
Not only is the operating system fully Open Source, also the process
|
||||
to create the eyes and to configure is openly available. Because the
|
||||
eyes are using OpenWRT, you are free to reconfigure the eye to your
|
||||
need.
|
||||
|
||||
### Wireguard included
|
||||
|
||||
The eyes use the [Wireguard](https://www.wireguard.com/) protocol to
|
||||
establish the VPN. If you are reconfiguring or resetting the eye,
|
||||
ensure that you make a backup of the wireguard private key.
|
||||
|
||||
## The footprint / small print
|
||||
|
||||
(*) The eyes are only reachable via IPv6. If we reach the If you do not have an IPv6
|
||||
connection, you can get IPv6 connectivity from the
|
||||
[IPv6VPN.ch](https://ipv6vpn.ch).
|
||||
|
|
@ -21,6 +21,11 @@ To foster IPv6 deployement, we created [IPv6.chat](../ipv6-chat/),
|
|||
which is also reachable via matrix. Follow above instructions and type
|
||||
**/join #ipv6:ungleich.ch** instead.
|
||||
|
||||
## 1000eyes
|
||||
|
||||
Are you interested in the [1000eyes](https://1000ey.es) project? Then
|
||||
do not hesitate to **/join #1000eyes:ungleich.ch**.
|
||||
|
||||
## VIIRB
|
||||
|
||||
If you own a [VIIRB](/u/products/viirb-ipv6-box)
|
||||
|
|
|
|||
Loading…
Reference in New Issue