Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Iroh 1.0

iroh.computer

Post reply on HN
Print view View original

21–30 of 488 posts

Re: Iroh 1.0

#21

Post by rklaehn »

convolvatron wrote: post #11

I should read the specs, but since it's such a foundational issue maybe someone who knows could respond briefly? the problem with a flat addressing space is that it requires every intermediate node to have state about every address, or perform a costly discovery mechanism for those it doesn't know about. is there a clever answer to this?

We have an answer, but it isn't really clever. We do have both built in and pluggable address lookup services.

Our default enabled address lookup service is using DNS in a creative way, but we also have a service that is fully peer to peer and is using the mainline DHT, specifically the bep_0044 extension that allows you to store a tiny bit of arbitrary data for an Ed keypair that you control.

https://www.bittorrent.org/beps/bep_0044.html

https://pkarr.org

Some custom transports such as TOR hidden services have a discovery system built in. In these cases we can just use the existing discovery system.

See for example https://github.com/n0-computer/iroh-tor-transport

Re: Iroh 1.0

#22

Post by matheus23 »

amatheus wrote: post #15
dignifiedquire wrote: post #6

hey, I helped make this :) will try to answer questions where I can

This looks very interesting. I’m not sure I understand this, but it seems to me like it competes (or is in the same space as) both Tailscale and zeromq/nanomsg via the protocols? I think it would be nice to have a comparison page to make it easier to position it (I didn’t find one).

We keep thinking about ways to combine iroh + zeroMQ! I think these two could compose. (Not familiar with nanomsg myself)

About tailscale: It's similar, but iroh is not a VPN, so it doesn't add a TUN interface. Instead, you'd build iroh directly into your application. Using iroh you can build a VPN, and there are projects that do so (iroh-lan/iroh-vpn are some hobbyist projects). The upside of building it into your application is that it doesn't need special permissions and is easy to ship to the user.

Re: Iroh 1.0

#23

Post by dignifiedquire »

embedding-shape wrote: post #13
dignifiedquire wrote: post #9

Earlier quoted context omitted.

As others have already mentioned, iroh the core library and protocol is fully open source. But to finance the development of it, we offer additional services to make it easier to deploy and run it, especially for larger or more specialized use caes.

Congrats for the launch, seems to have matured a bunch and Iroh gotten a bunch of neat additions since I last looked! You even managed to get 1.0 out the door before go-ipfs / Kubo ;) > But to finance the development of it, we offer additional services to make it easier to deploy and run it, especially for larger or more specialized use caes. Interesting (and somewhat proven) idea to finance it, smart :) Did you guys…

we have been doing this for a while now, you can find some of our highlights listed here https://www.iroh.computer/solutions

Re: Iroh 1.0

#28

Post by rafram »

dignifiedquire wrote: post #9
j4cobgarby wrote: post #2

Doesn't it seem odd to have "Pricing" for a protocol that's meant to serve a similar function to IP addresses? Maybe I'm misunderstanding something.

As others have already mentioned, iroh the core library and protocol is fully open source. But to finance the development of it, we offer additional services to make it easier to deploy and run it, especially for larger or more specialized use caes.

I think it would be clearer if you put the "Pricing" navbar link under "Services."

Re: Iroh 1.0

#30

Post by dignifiedquire »

piskov wrote: post #17
dignifiedquire wrote: post #6

hey, I helped make this :) will try to answer questions where I can

Does this solve the problem of internet segmentation due to politcs? For example: dns control, tls certification bans (just this month both let’s encrypt and globalsign started revoking Russian certificates), once google starts really complaining about https it gets ugly. Russia aside, anyone else is closely watching (europe, brics, what have you)

While it doesn't solve all the issues that come up through the current segmentation, it is very much possible today to assemble components that let you forget about segmentation while you use it. And it is designed from the ground up, to use existing internet technologies, while avoiding the lock in and dependencies on browser vendors or other large players.
Post reply on HN