From 8609de1749c503ba0b3f1573b99ec2f8ff07a6bc Mon Sep 17 00:00:00 2001 From: bnewbold Date: Fri, 22 Jun 2012 21:45:34 -0400 Subject: shift stuff around --- Index.page | 11 +-- altnet.page | 55 ++++++++++++++ applications.page | 64 ++++++++++++++++ configuration.page | 10 ++- distribution.page | 9 ++- events.page | 4 + hardware/miniPCIe.page | 4 + ideas.page | 4 +- links.page | 64 ---------------- refs.page | 27 +++++++ security.page | 10 ++- services.page | 46 ++++++++++++ software.page | 53 -------------- unsorted.page | 194 ++++++++++++++++++++----------------------------- 14 files changed, 310 insertions(+), 245 deletions(-) create mode 100644 altnet.page create mode 100644 applications.page delete mode 100644 links.page create mode 100644 services.page diff --git a/Index.page b/Index.page index 86cbfe1..d895376 100644 --- a/Index.page +++ b/Index.page @@ -1,6 +1,9 @@ This is a pseudo-open [gitit](http://gitit.net) repo for brainstorming around -the [rooter](http://rooter.is) open hardware wireless router. +the [rooter](http://rooter.is) open hardware wireless router. You can read more +about the **[motivation]()** and **[principles]()** behind the project on this +wiki and there is a **[FAQ](http://rooter.is/moreinfo.html)** linked from the +**[front page](http://rooter.is/)**. Feel free to create an account, but note that the connection is NOT secure. See the links to the left for help; the kdefault syntax is markdown, and the @@ -12,14 +15,13 @@ and browse the archives [here](http://mailman.rooter.is/mailman/listinfo/talk). * **[Hardware Specifications](/hardware/specs)** * **[Operating System](/distribution)** * **[Configuration Management](/configuration)** -* **[Services](/services) and [Applications](/applications)** +* **Software [Services](/services) and [Applications](/applications)** * **[Packet Routing](/routing)** # Development -* [principles]() * [questions]() -* [ideas]() +* [ideas](): blue sky # Reference @@ -28,7 +30,6 @@ and browse the archives [here](http://mailman.rooter.is/mailman/listinfo/talk). # Other Stuff -* [motivation]() * [hardware/cpu]() * [hardware/misc]() * [unsorted]() diff --git a/altnet.page b/altnet.page new file mode 100644 index 0000000..6dcda4c --- /dev/null +++ b/altnet.page @@ -0,0 +1,55 @@ + +## Wireless Mesh Networks + +fabfi: +, + + +## Overlay/Piggyback Networks + +GNUnet + +i2p + +[Netsukuku](https://en.wikipedia.org/wiki/Netsukuku): decentralized, anonymous, +overlay network + + + + (portland project) + +## Synthesis/Distribution Projects + + + +[Byzantium](http://project-byzantium.org/): ad-hoc mesh networking + +[serval](http://www.servalproject.org/): well funded project to provide mesh +telephony etc. developing world, crisis areas. "Distributed Numbering +Architecture" + +## Academic + + (unmanaged internet architecture) + +[Tonika: social routing with organic +security](http://pdos.csail.mit.edu/~petar/5ttt.org/>): Tonika is an +administration-free platform for large-scale open-membership (social) networks +with robust security, anonymity, resilience and performance guarantees + +## Links, Unsorted + +distributed VPN: + - eg, distributing avahi over openvpn. printing, sensors, service access + - + - scurry (haskell): + +OpenRadio: stanford/industry project to build software radio devices to "pool" +bandwidth across multiple uplinks + +[secure share](http://secushare.org/): full on project to build federated/p2p +services over GNUnet and psyc + +anoNet (?) + + diff --git a/applications.page b/applications.page new file mode 100644 index 0000000..f31dafd --- /dev/null +++ b/applications.page @@ -0,0 +1,64 @@ + +Some user-facing applications that could run on rooter. See also [services](). + +Unless noted otherwise, these would be optional and not run by default. + +## Toolchains, Frameworks + +By default, ship with popular scripting language interpreters, package +managers, and web frameworks? + +* Python: pip, flask +* Node.js: npm, websockets stuff +* Ruby: gems, rails, passenger, rack, ??? +* Lua + +Perl? PHP? Java? + +What about datastores (SQL, mongo, cdb)? + +## General Web Apps + +* Blog/tumble +* Wiki +* FAQ/Q&A + +## Frameworks + +By default, ship with + +## Privacy + +Proxy: reroute tracking cookies/urchins, block cleartext telnet, ftp, etc. Does +[privoxy](http://www.privoxy.org/) do all this and more? + +Tor: Easy to configure as throttled relay, bridge, and exit node. Also as a +client, running as transparent gateway for all LAN traffic, or specific +ethernet ports or wireless SSIDs. Should at least ship with Tor browser bundle, +source code, relay list, and project's GPG public keys. + +## Security + +SSL Watchdog: observe SSL/TLS traffic and block when blacklist detected +(revocation), or HTTP connection to HTTPS blacklist (or all?), or "bad" cert +authorities *(perhaps by default)* + +## Data Sharing, Publishing + +[OpenPhoto](http://www.kickstarter.com/projects/jmathai/openphoto-a-photo-service-for-your-s3-or-dropbox-a?ref=category) + +[RetroShare](http://en.wikipedia.org/wiki/Retroshare) + +Bittoreent tracker, client, seeding. Subscriptions, podcasts, free episodes, +ISOs, archival media, public data backups. + +## Network Analysis Tools + +Wireshark + +HTTP application timing and analysis (for web developers; similar to chromium's +HTTP timeline). + +# References + +* [Linode Library](http://library.linode.com/) for installation guides diff --git a/configuration.page b/configuration.page index fc595fe..0357b79 100644 --- a/configuration.page +++ b/configuration.page @@ -82,12 +82,18 @@ controlling defaults). Also needed is a layer on top of Augeas to manage higher level logic and service restarts; Config::Model might fill that role, or perhaps components of UCI could be extracted. +### Bonus Features and Ideas + +Could host a (centralized?) configuration sharing and upvoting site where +anybody could post snazzy configuration patchsets. Searchable by tags? +Mark/vote as insecure or problematic? Comment/discuss/improve? + ### Other Tools * OpenWrt's UCI and LuCI * Puppet [http://www.aosabook.org/en/puppet.html](design writeup) (from "Architecture of Open Source Applications") -* Chef: [Knife](http://www.cfengine.com/), - [Solo](http://wiki.opscode.com/display/chef/Chef+Solo) +* Chef: Knife, [Solo](http://wiki.opscode.com/display/chef/Chef+Solo) +* Cfengine ([http://blog.normation.com/2011/02/23/why-we-use-cfengine-memory-footprint](2011 blog post on low memory usage)) * [etckeeper](http://joeyh.name/code/etckeeper/) * [salt](https://en.wikipedia.org/wiki/Salt_(software)) * gconf diff --git a/distribution.page b/distribution.page index 4ffae1c..665a887 100644 --- a/distribution.page +++ b/distribution.page @@ -26,6 +26,7 @@ rack mounted machines: * [pfSense](http://www.pfsense.org/): FreeBSD, forked from m0n0wall * [m0n0wall](http://m0n0.ch/wall/): FreeBSD, php interface * [Smoothwall](): commercial with "free" version +* [zrouter](http://zrouter.org) freebsd router It's also worth noting that Juniper Network's junos router operating system is based on FreeBSD. Juniper equipment isn't as widespread as Cisco's iOS-based @@ -37,7 +38,9 @@ many of the most crucial 40Gbps+ routers at submarine fiber shore stations. A lot of people have thought about mixing the kernel, drivers, and configuration system from OpenWrt with the mainstream packages from Debian. -Eg, [DebianWRT](http://wiki.debian.org/DebianWRT). +* [DebianWRT](http://wiki.debian.org/DebianWRT) +* [debwrt](http://www.debwrt.net/) is a stale project to bring debian packages + to the OpenWRT kernel/init system. ### Genode @@ -54,5 +57,7 @@ here](http://mailman.rooter.is/pipermail/talk/2012-June/000023.html). * [LibreWRT](http://librewrt.org/index.php?title=Main_Page) * [FreeWRT](https://www.freewrt.org/trac/) -* [Embedian](http://wiki.debian.org/Embedded_Debian) +* [Embedded Debian](http://wiki.debian.org/Embedded_Debian), + [embedian](http://www.emdebian.org/) +* [Zeroshell](http://www.zeroshell.net/eng/) diff --git a/events.page b/events.page index 0637c6c..a781bbc 100644 --- a/events.page +++ b/events.page @@ -17,3 +17,7 @@ CCC: dec 2012 FOSDEM: feb 2013? +### More + +USENIX FOCI conference +([call for papers](https://www.usenix.org/conference/foci12/calls-for-papers)) diff --git a/hardware/miniPCIe.page b/hardware/miniPCIe.page index fca8a5c..b7b19b7 100644 --- a/hardware/miniPCIe.page +++ b/hardware/miniPCIe.page @@ -1,4 +1,8 @@ +miniPCIe cable modem? + +open hardware miniPCIe wifi? from Qi hardware? + mini pci-express wifi cards: let's say $30 end cost for dual-band [$16 atheros](http://www.amazon.com/Atheros-AR5008-802-11n-Wireless-AR5BXB72/dp/B004ZHWKM0/ref=sr_1_22?s=electronics&ie=UTF8&qid=1329885631&sr=1-22) diff --git a/ideas.page b/ideas.page index d40c0e9..82b581f 100644 --- a/ideas.page +++ b/ideas.page @@ -1,7 +1,5 @@ - Ideas are cheap! Good ones: -- "crowd-sourced" configuration management advice (most popular settings, etc) - use of generic WebDAV and OAuth for data interchange ### Local, low-latency network services @@ -135,7 +133,7 @@ works offline. - FM transmitter for local audio - game server (minecraft, ioquake, starcraft, love, WoW, etc) - web app framework for secure, data-respecting services easily - +- DIY CDN: Javascript, fonts, other display media. # Halfbaked diff --git a/links.page b/links.page deleted file mode 100644 index dc35121..0000000 --- a/links.page +++ /dev/null @@ -1,64 +0,0 @@ - -### Operating Systems, Distributions - -[debwrt](http://www.debwrt.net/) is a stale project to bring debian packages to -the OpenWRT kernel/init system. - -[embedian](http://www.emdebian.org/) - -[zrouter](http://zrouter.org) freebsd router - -### Funding - -[NLnet](http://nlnet.nl/foundation/can_do.html) in the netherlands gives grants -for hardware and free internet development. - -### Open Hardware Projects and Communities - -[Fairwaves](http://www.fairwaves.ru/) builds SDR hardware for rural -telecommunications, GSM and WiMax - -[OpenPICUS](http://www.openpicus.com/site/technology/overview) 802.15.4 dev -platform? - -[Nanode](http://www.nanode.biz/about/) IoT board - -[Qi Hardware](http://en.qi-hardware.com/wiki/Planet) planet (blog agregator) - -[HiQSDR](http://www.hiqsdr.org/) (SDR project) - -[fonhome](http://www.myprofe.com/fonhome/) home monitoring with fonera - -[owbox](http://www.owbox.com/) 802.15.4 monitoring, french - -### Misc Hardware Products and Projects - -http://pwnieexpress.com/wireless.html - -[Funcube dongle](http://www.funcubedongle.com/?page_id=286) (space SDR) - -### Wireless Stuff - -WiFi Direct (device-to-device) - -[MQTT light pubsub protocol](http://en.wikipedia.org/wiki/MQ_Telemetry_Transport) - -### Security Libraries and Projects - -[TropicSSL](http://www.stackfoundry.com/open-source/tropicssl/) embedded -SSL/TLS library - -[whirlygig random number generator](http://warmcat.com/_wp/whirlygig-rng/), -CPLD-based - -[secure internet of things](http://www.shahidraza.info/) - -### Papers - -"User freedom to attach devices" by Scott Jordan and Gwen Shaffer - -### Events - -USENIX FOCI conference -([call for papers](https://www.usenix.org/conference/foci12/calls-for-papers)) - diff --git a/refs.page b/refs.page index e743e39..d5cfa2a 100644 --- a/refs.page +++ b/refs.page @@ -1,3 +1,30 @@ + +## Open Hardware Projects and Communities + +[Fairwaves](http://www.fairwaves.ru/) builds SDR hardware for rural +telecommunications, GSM and WiMax + +[OpenPICUS](http://www.openpicus.com/site/technology/overview) 802.15.4 dev +platform? + +[Nanode](http://www.nanode.biz/about/) IoT board + +[Qi Hardware](http://en.qi-hardware.com/wiki/Planet) planet (blog agregator) + +[HiQSDR](http://www.hiqsdr.org/) (SDR project) + +[fonhome](http://www.myprofe.com/fonhome/) home monitoring with fonera + +[owbox](http://www.owbox.com/) 802.15.4 monitoring, french + +## Funding + +[NLnet](http://nlnet.nl/foundation/can_do.html) in the netherlands gives grants +for hardware and free internet development. + +## Academic + +[secure internet of things](http://www.shahidraza.info/) ### existing organizations/projects [FreedomBox Foundation](http://freedomboxfoundation.org/) diff --git a/security.page b/security.page index 40d81dd..dea8a2e 100644 --- a/security.page +++ b/security.page @@ -1,6 +1,14 @@ +## Questions + External attackers likely could/would port scan and be able to identify the -device +device; is that a problem? + +## Pitfalls, Lessons Learned + +XSS attack to back out geo location of router: + +## Links, Unsorted [Tripphrases](http://worrydream.com/tripphrase/) diff --git a/services.page b/services.page new file mode 100644 index 0000000..b05f9cb --- /dev/null +++ b/services.page @@ -0,0 +1,46 @@ + +Some lower-level services and utilities that could run on rooter. See also +[applications](). + +Unless noted otherwise, these would all be optional and not run by default. + +## DNS + +A local, caching dnsmasq should be run and advertised on LAN interfaces by +default, with easy user selection of alternative upstream servers. + +Is it possible to have an intermediate DNS server check DNSSEC even if the end +clients don't? + +## VPN + +OpenVPN, IPSec + +## System Logging and Monitoring + +[Amon](http://amon.cx/): monitoring and error tracking + +### Local internet graph/map explorer + +Explore a graph of router hops outwards. Latency as color? Named by network? +Width by traffic? Show international fiber links? + +### Statistical Traffic Analysis + +data/time spent by: + protocol: UDP/TCP + protocol: torrent, HTTP, HTTPS, DNS, SSH, etc + device type + website + host (from whitelist?) + MIME type (json?) + region + compressed/uncompressed + +## File System and Storage + +Tahoe-LAFS ([tutorial](https://www.linux.com/learn/tutorials/546799:weekend-project-get-started-with-tahoe-lafs-storage-grids)) + +# References + +* [Linode Library](http://library.linode.com/) for installation guides diff --git a/software.page b/software.page index 659bf65..49f45e1 100644 --- a/software.page +++ b/software.page @@ -1,48 +1,8 @@ -Some software that could run on rooter... - -### Local internet graph/map explorer - -Explore a graph of router hops outwards. Latency as color? Named by network? -Width by traffic? Show international fiber links? - - -### Statistical Traffic Analysis - -data/time spent by: - protocol: UDP/TCP - protocol: torrent, HTTP, HTTPS, DNS, SSH, etc - device type - website - host (from whitelist?) - MIME type (json?) - region - compressed/uncompressed ### SSL Watchdog -Observe SSL/TLS traffic and block when blacklist detected (revocation), or HTTP -connection to HTTPS blacklist (or all?), or "bad" cert authorities - - -### Privacy blocker - -Reroute tracking cookies/urchins? Scramble IPv6 packets regularly - -Block cleartext telnet, ftp, etc - - -### Trusted Mutual Backups - -Swap encrypted file backups with known peers for geographical redundancy. - -Is there a good package for this already? - - -### Javascript/Media Cache - -eg, jQuery, CSS, etc. "DIY CDN" ### Torrent Mirroring, Subscriptions @@ -50,17 +10,4 @@ eg, jQuery, CSS, etc. "DIY CDN" podcasts, free episodes, ISOs, archival media, public data backups -### Internet Protocol Analyser - -wireshark, chromium fetch timing analysis - -### Misc - -[OpenPhoto](http://www.kickstarter.com/projects/jmathai/openphoto-a-photo-service-for-your-s3-or-dropbox-a?ref=category) - -[RetroShare](http://en.wikipedia.org/wiki/Retroshare) - -Tahoe-LAFS ([tutorial](https://www.linux.com/learn/tutorials/546799:weekend-project-get-started-with-tahoe-lafs-storage-grids)) - -[Amon](http://amon.cx/) (monitoring and error tracking) diff --git a/unsorted.page b/unsorted.page index d8f63b9..04c5e64 100644 --- a/unsorted.page +++ b/unsorted.page @@ -1,87 +1,68 @@ -http://wiki.hamburg.ccc.de/index.php/ChaosVPN - -[Grid Appliance](http://www.grid-appliance.org/): a virtual machine image for -quickly spooling up a distributed cluster for high performance computing. - -Netsukuku: https://en.wikipedia.org/wiki/Netsukuku - -Sensorpedia: http://www.sensorpedia.com/ - -OpenRadio: stanford/industry project to build software radio devices to "pool" -bandwidth across multiple uplinks - -(for development) stackoverflow thread on embedded flash linux filesystems: - - -[Byzantium](http://project-byzantium.org/): ad-hoc mesh networking - -[serval](http://www.servalproject.org/): well funded project to provide mesh -telephony etc. developing world, crisis areas. "Distributed Numbering -Architecture" +# Software [psyc](http://about.psyc.eu/PSYC): mature, lightweight "SYnchronous Conferenceing" protocol. appropriate for embedded hardware? -[secure share](http://secushare.org/): full on project to build federated/p2p -services over GNUnet and psyc +services/tools: + - in-browser code editing: + - server monitoring: + - vanilla forums (PHP): -links to CPU power draw benchmarks: + -cfengine3: an alternative to puppet/chef. blog post: - + (network +tuning and testing tools for linux) -[gpgAuth](http://gpgauth.org/): gpg for web service authentication + (network performance tool) -web proxy autodiscovery (for www browser proxy configuration): - + (small, minimal software and libraries) -trimslice tegra 2 all-in-one fanless desktop computer: - + ("musl" libc) -fabfi: -, - +[TropicSSL](http://www.stackfoundry.com/open-source/tropicssl/) embedded +SSL/TLS library -delamination (net neutrality): - +[whirlygig random number generator](http://warmcat.com/_wp/whirlygig-rng/), +CPLD-based -WiFi Pineapple Mark IV: - +# Network -MegaMIMO (MIT 100k competitor) +[Grid Appliance](http://www.grid-appliance.org/): a virtual machine image for +quickly spooling up a distributed cluster for high performance computing. -[underweb](http://underweb.info): experimental/academic non-HTML "multimedia -browser" +networking tools: + - + - + - + - -telekommunist writings: - +# Hardware -[thimbl](http://www.thimbl.net/index.html) + (comsat downlink to wifi) -[Apple IPv6 issues and status (may 2012)](http://arstechnica.com/apple/2012/05/the-future-is-forever-the-state-of-ipv6-in-the-apple-world/) + (some bridge/mesh/wireless router?) -"Smart Energy Profile 2.0": - - industry standard for home energy crap - - , - - +[Vortex86 x86 CPU](http://www.vortex86sx.com/?page_id=286), +hardware random number generator with schematic: + -inject/manipulate ads in HTML: +links to CPU power draw benchmarks: -great documentation example: +trimslice tegra 2 all-in-one fanless desktop computer: + -services/tools: - - in-browser code editing: - - server monitoring: - - vanilla forums (PHP): +WiFi Pineapple Mark IV: + -anoNet (?) +802.15.4 "MiWi" from microchip (proprietary): -"franklin street statement": - +[SD form factor wireless cards](http://www.spectec.com.tw/products.html) -802.15.4 "MiWi" from microchip (proprietary): + + +[Funcube dongle](http://www.funcubedongle.com/?page_id=286) (space SDR) more SoCs: ST SPEAr1340 http://www.st.com/internet/mcu/product/251211.jsp @@ -103,95 +84,80 @@ atheros stuff: - http://www.qca.qualcomm.com/technology/technology.php?nav1=47 - http://www.qca.qualcomm.com/technology/technology.php?nav1=50 -------- - - - configuration management +# Writings, Documents - +telekommunist writings: + - +"franklin street statement": + -[Vortex86 x86 CPU](http://www.vortex86sx.com/?page_id=286), +FCC. FCC 10-201, Open Internet Order, December 2010. Available at + (broken +link) - - : "Networking@Home" blog post from The ISP Column (IETF) -[IETF Homenet](http://www.ietf.org/id/draft-ietf-homenet-arch-02.txt) - [arstechnica article](http://arstechnica.com/tech-policy/news/2010/03/how-amsterdam-was-wired-for-open-access-fiber.ars) on wiring amsterdam with fiber - (routing advice for OpenWRT) +"User freedom to attach devices" by Scott Jordan and Gwen Shaffer -unforgetable key: split key into N shards, give to friends. they can all -"intervene" together, unlikely to jointly betray you - - +# Really Unsorted - +Sensorpedia: http://www.sensorpedia.com/ - +(for development) stackoverflow thread on embedded flash linux filesystems: + - +[gpgAuth](http://gpgauth.org/): gpg for web service authentication -distributed VPN: - - eg, distributing avahi over openvpn. printing, sensors, service access - - - - scurry (haskell): +web proxy autodiscovery (for www browser proxy configuration): + - (network -tuning and testing tools for linux) + (routing advice for OpenWRT) - (network performance tool) +delamination (net neutrality): + - (GPU software routing) +MegaMIMO (MIT 100k competitor) - (ARM network chips) +[underweb](http://underweb.info): experimental/academic non-HTML "multimedia +browser" -miniPCIe cable modem? +[thimbl](http://www.thimbl.net/index.html) -open hardware miniPCIe wifi? from Qi hardware? +[Apple IPv6 issues and status (may 2012)](http://arstechnica.com/apple/2012/05/the-future-is-forever-the-state-of-ipv6-in-the-apple-world/) -FCC. FCC 10-201, Open Internet Order, December 2010. Available at - (broken -link) +"Smart Energy Profile 2.0": + - industry standard for home energy crap + - , + - -hardware random number generator with schematic: - +inject/manipulate ads in HTML: -networking tools: - - - - - - - - +great hardware documentation example: - (FNF lab setup) + - (unmanaged internet architecture) +[IETF Homenet](http://www.ietf.org/id/draft-ietf-homenet-arch-02.txt) -GNUnet +unforgetable key: split key into N shards, give to friends. they can all +"intervene" together, unlikely to jointly betray you - (comsat downlink to wifi) + - (portland project) + (GPU software routing) - (some bridge/mesh/wireless router?) + (ARM network chips) (6lowpan RFC) - (small, minimal software and libraries) - - ("musl" libc) - Netgear "Smart Network": (open source support? site down) -random links -------------------------------------------------------------- - open wifi drivers for broadcom: wireless network monitor: @@ -204,11 +170,6 @@ defcon network ops (using aruba hardware): request for managed router on hacker news: http://news.ycombinator.com/item?id=1160585 - -XSS attack to back out geo location of router: - -SD form factor wireless cards: - debian HOWTOs: (vague...) @@ -218,3 +179,6 @@ blog post on using routers as tor bridges: +WiFi Direct (device-to-device) + +[MQTT light pubsub protocol](http://en.wikipedia.org/wiki/MQ_Telemetry_Transport) -- cgit v1.2.3