X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fexample.texi;h=688898a76bf350e646fac90b3ef7f702a5c40aa1;hb=a11b0bda178937e6891770f40f800d69b5640313;hp=fe00545854bd630794b5afedcd5920369aa202ae;hpb=1fea06143f0580f3d40a9ddbb1425ab613910155;p=govpn.git diff --git a/doc/example.texi b/doc/example.texi index fe00545..688898a 100644 --- a/doc/example.texi +++ b/doc/example.texi @@ -1,7 +1,4 @@ @node Example -@cindex Example -@cindex Example usage -@cindex Tutorial @section Example usage Let's assume that there is some insecure link between your computer and @@ -12,7 +9,7 @@ WiFi-reachable gateway. @item You want to create virtual encrypted and authenticated 172.16.0/24 network and use it as a default transport. @item Assume that outgoing GoVPN packets can be fragmented, so we do not -bother configuring MTU of TAP interfaces. For better performance just +bother configuring MTU of TUN/TAP interfaces. For better performance just lower it and check that no fragmentation of outgoing UDP packets occurs. @end itemize @@ -22,77 +19,77 @@ software: download, @ref{Integrity, check the signature}, compile. @strong{Prepare the client}. Generate client's verifier for Alice as an example: -@cindex newclient.sh @verbatim client% ./utils/newclient.sh Alice Passphrase: -Your client verifier is: $argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg +Your client verifier is: $balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg Place the following YAML configuration entry on the server's side: Alice: up: /path/to/up.sh - iface: or TAP interface name - verifier: $argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg$KCNIqfS4DGsBTtVytamAzcISgrlEWvNxan1UfBrFu10 + iface: or TUN/TAP interface name + verifier: $balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg$KCNIqfS4DGsBTtVytamAzcISgrlEWvNxan1UfBrFu10 @end verbatim -@strong{Prepare the server}. Add this entry to @code{peers.yaml} +@strong{Prepare the server}. Add this entry to @file{peers.yaml} configuration file: @verbatim Alice: iface: tap10 - verifier: $argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg$KCNIqfS4DGsBTtVytamAzcISgrlEWvNxan1UfBrFu10 + verifier: $balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg$KCNIqfS4DGsBTtVytamAzcISgrlEWvNxan1UfBrFu10 @end verbatim @strong{Prepare network on GNU/Linux IPv4 server}: -@example +@verbatim server% ip addr add 192.168.0.1/24 dev wlan0 -server% tunctl -t tap10 +server% ip tuntap add dev tap10 mode tap server% ip addr add 172.16.0.1/24 dev tap10 server% ip link set up dev tap10 -@end example +@end verbatim @strong{Run server daemon itself}: -@example +@verbatim server% govpn-server -bind 192.168.0.1:1194 -@end example +@end verbatim @strong{Prepare network on GNU/Linux IPv4 client}: -@example +@verbatim client% ip addr add 192.168.0.2/24 dev wlan0 -client% tunctl -t tap10 +client% ip tuntap add dev tap10 mode tap client% ip addr add 172.16.0.2/24 dev tap10 client% ip link set up dev tap10 -client% ip route add default via 172.16.0.1 -@end example +client% ip route add 0/1 via 172.16.0.1 +client% ip route add 128/1 via 172.16.0.1 +@end verbatim @strong{Run client daemon itself}: -@example +@verbatim client% govpn-client \ - -verifier '$argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg' \ + -verifier '$balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg' \ -iface tap10 \ -remote 192.168.0.1:1194 -@end example +@end verbatim @strong{FreeBSD IPv6 similar client-server example}: -@example +@verbatim server% ifconfig em0 inet6 fe80::1/64 server% govpn-server -bind "fe80::1%em0" -@end example +@end verbatim -@example +@verbatim client% ifconfig me0 inet6 -ifdisabled auto_linklocal client% ifconfig tap10 client% ifconfig tap10 inet6 fc00::2/96 up client% route -6 add default fc00::1 client% govpn-client \ - -verifier '$argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg' \ + -verifier '$balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg' \ -iface tap10 \ -remote "[fe80::1%me0]":1194 -@end example +@end verbatim