Netsody 1.0.0-rc.2 adds an option to keep direct traffic out of selected networks and makes Netsody considerably gentler when establishing direct connections. It follows rc.1 by only a few days and continues its focus on direct connectivity.
Keeping Direct Traffic out of Selected Networks
Netsody always prefers a direct encrypted path between two devices. To find one, it probes the addresses under which a peer might be reachable, including addresses in local networks. In some environments this is not wanted, for example when probes into certain subnets are not permitted or would only trigger alerts.
rc.2 adds the ignored_physical_routes option for this. It takes a list of networks in CIDR notation and is set at the top level of the agent’s config.toml:
ignored_physical_routes = ["192.168.188.0/24", "10.20.0.0/16"]
Netsody then stops probing and sending packets into these networks. Connections to peers located there continue to work over super peers.
Gentler Connection Establishment
rc.2 also changes how Netsody probes in general. Previously, it repeatedly sent bursts of packets to each of a peer’s possible addresses. It now probes them at a steady pace and backs off over time. Unreachable addresses, such as a peer’s local network address seen from a different network, no longer receive aggressive bursts. Your traffic keeps flowing over super peers in the meantime.
In addition, once a connection to a peer is established over a super peer, Netsody no longer keeps opening duplicate connections to it, which reduces connection churn. It still upgrades to a faster direct connection whenever possible.
Also in rc.2
- Removed devices: Fixed a case where Netsody could keep trying to reach a device that had just been removed from the network.
New in the Documentation
Alongside rc.2, the documentation gained a page on super peers that explains what they do, what they can and cannot see, and how to run your own. There is also a new glossary of the terms used across Netsody.
Try it
Install the latest release at my.netsody.io/install. The complete list of changes is in the release notes.
If something doesn’t work the way you expect, tell us on Discord or at oi.ydosten@olleh.