How an I2P router works without a dedicated IP address. The magic of direct connection of two subscribers behind NAT

Most internet users do not have a dedicated address. This is due to the limited IP address range of version 4 (IPv4) of 4.2 billion. Considering that there are twice as many people on the planet, and even some of them have several gadgets - you will not find enough addresses. The problem is solved in the IPv6 protocol, which has an unimaginably large range, where there will be enough addresses for the entire solar system, even when all the planets are inhabited. The catch, however, is that IPv6 is being implemented very slowly and reluctantly into today's network. Therefore, we have what we have: Internet providers release hundreds and thousands of people into the global network under one IPv4 address (through a NAT server).

NAT – -. , - , , , – , IP-, .

I2P , . , : , I2P- .

UDP Hole punch

, UDP. UDP , . UDP – - - , , , NTP – , .

TCP . UDP .

UDP «hole punch» ( ), NAT-, . , , . , - .

, UDP- (hole punch), , , , . , TCP, .

I2P

I2P - TCP UDP – NTCP2 SSU . I2P, . - TCP UDP, -, TCP UDP.

NTCP2 TCP, IP-. , NTCP2 . , SSU UDP . SSU , , .

- , USB-. : . SSU NAT- , , (hole punch). NTCP2 , SSU, UDP-.

, I2P – , .. TCP- SSU.

(Router Info, «RI»), (Router Caps), . , .

, , RI. , IPv4 , IPv6 – . , .

:

C, , (introducer). i2pd , SSU, I2P- IP- .

()

I2P-, SSU (hole punch), Router Info .

NAT- RI, . , . , , .

, Router Info . , , , . Router Info , . , , RI.

.

(Alice ) (Bob), (Charlie). (RelayIntro) IP- , . UDP-, (hole punch). SSU-.

, : , . I2P- IP- . !

SSU .

() IP-. IP- Router Info. I2P- IP- , , , .

, , - . , .

i2pd IP- , , I2P- ( , -).

iptables



:

iptables -A INPUT -p tcp --dport <i2pd_port> -j DROP
iptables -A INPUT -p udp --dport <i2pd_port> -j DROP
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

IPv6-, ip6tables



.

"Firewalled" . , .