9089fdd2d5
* Added support for 'dynamic keys' mode, where the router creates a new
router identity whenever it detects a substantial change in its public
address (read: SSU IP or port). This only offers minimal additional
protection against trivial attackers, but should provide functional
improvement for people who have periodic IP changes, since their new
router address would not be shitlisted while their old one would be.
* Added further infrastructure for restricted route operation, but its use
is not recommended.
84 lines
4.8 KiB
Plaintext
84 lines
4.8 KiB
Plaintext
<%@page contentType="text/html" %>
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
|
|
<html><head>
|
|
<title>I2P Router Console - config networking</title>
|
|
<link rel="stylesheet" href="default.css" type="text/css" />
|
|
</head><body>
|
|
|
|
<%@include file="nav.jsp" %>
|
|
<%@include file="summary.jsp" %>
|
|
|
|
<jsp:useBean class="net.i2p.router.web.ConfigNetHelper" id="nethelper" scope="request" />
|
|
<jsp:setProperty name="nethelper" property="contextId" value="<%=(String)session.getAttribute("i2p.contextId")%>" />
|
|
|
|
<div class="main" id="main">
|
|
<%@include file="confignav.jsp" %>
|
|
|
|
<jsp:useBean class="net.i2p.router.web.ConfigNetHandler" id="formhandler" scope="request" />
|
|
<jsp:setProperty name="formhandler" property="*" />
|
|
<jsp:setProperty name="formhandler" property="contextId" value="<%=(String)session.getAttribute("i2p.contextId")%>" />
|
|
<font color="red"><jsp:getProperty name="formhandler" property="errors" /></font>
|
|
<i><jsp:getProperty name="formhandler" property="notices" /></i>
|
|
|
|
<form action="config.jsp" method="POST">
|
|
<% String prev = System.getProperty("net.i2p.router.web.ConfigNetHandler.nonce");
|
|
if (prev != null) System.setProperty("net.i2p.router.web.ConfigNetHandler.noncePrev", prev);
|
|
System.setProperty("net.i2p.router.web.ConfigNetHandler.nonce", new java.util.Random().nextLong()+""); %>
|
|
<input type="hidden" name="nonce" value="<%=System.getProperty("net.i2p.router.web.ConfigNetHandler.nonce")%>" />
|
|
<input type="hidden" name="action" value="blah" />
|
|
|
|
<b>External UDP address:</b> <i><jsp:getProperty name="nethelper" property="udpAddress" /></i><br />
|
|
<b>Require SSU introductions? </b>
|
|
<input type="checkbox" name="requireIntroductions" value="true" <jsp:getProperty name="nethelper" property="requireIntroductionsChecked" /> /><br />
|
|
<p>If you can, please poke a hole in your NAT or firewall to allow unsolicited UDP packets to reach
|
|
you on your external UDP address. If you can't, I2P now includes supports UDP hole punching
|
|
with "SSU introductions" - peers who will relay a request from someone you don't know to your
|
|
router for your router so that you can make an outbound connection to them. I2P will use these
|
|
introductions automatically if it detects that the port is not forwarded (as shown by
|
|
the <i>Status: OK (NAT)</i> line), or you can manually require them here.
|
|
Users behind symmetric NATs, such as OpenBSD's pf, are not currently supported.</p>
|
|
<input type="submit" name="recheckReachability" value="Check network reachability..." />
|
|
<hr />
|
|
|
|
<b>Bandwidth limiter</b><br />
|
|
Inbound rate:
|
|
<input name="inboundrate" type="text" size="2" value="<jsp:getProperty name="nethelper" property="inboundRate" />" /> KBps
|
|
bursting up to
|
|
<input name="inboundburstrate" type="text" size="2" value="<jsp:getProperty name="nethelper" property="inboundBurstRate" />" /> KBps for
|
|
<jsp:getProperty name="nethelper" property="inboundBurstFactorBox" /><br />
|
|
Outbound rate:
|
|
<input name="outboundrate" type="text" size="2" value="<jsp:getProperty name="nethelper" property="outboundRate" />" /> KBps
|
|
bursting up to
|
|
<input name="outboundburstrate" type="text" size="2" value="<jsp:getProperty name="nethelper" property="outboundBurstRate" />" /> KBps for
|
|
<jsp:getProperty name="nethelper" property="outboundBurstFactorBox" /><br />
|
|
<i>KBps = kilobytes per second = 1024 bytes per second.<br />
|
|
A negative rate means a default limit of 16KBytes per second.</i><br />
|
|
Bandwidth share percentage:
|
|
<jsp:getProperty name="nethelper" property="sharePercentageBox" /><br />
|
|
Sharing a higher percentage will improve your anonymity and help the network
|
|
<hr />
|
|
<b>Dynamic Router Keys: </b>
|
|
<input type="checkbox" name="dynamicKeys" value="true" <jsp:getProperty name="nethelper" property="dynamicKeysChecked" /> /><br />
|
|
<p>
|
|
This setting causes your router identity to be regenerated every time your IP address
|
|
changes. If you have a dynamic IP this option can speed up your reintegration into
|
|
the network (since people will have shitlisted your old router identity), and, for
|
|
very weak adversaries, help frustrate trivial
|
|
<a href="http://www.i2p.net/how_threatmodel#intersection">intersection
|
|
attacks</a> against the NetDB. Your different router identities would only be
|
|
'hidden' among other I2P users at your ISP, and further analysis would link
|
|
the router identities further.</p>
|
|
<p>Note that when I2P detects an IP address change, it will automatically
|
|
initiate a restart in order to rekey and to disconnect from peers before they
|
|
update their profiles - any long lasting client connections will be disconnected,
|
|
though such would likely already be the case anyway, since the IP address changed.
|
|
</p>
|
|
<hr />
|
|
<input type="submit" name="save" value="Save changes" /> <input type="reset" value="Cancel" /><br />
|
|
</form>
|
|
</div>
|
|
|
|
</body>
|
|
</html>
|