X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fserver.texi;h=325d317cb4b435f88398e56d51382166919c008f;hb=f9209136cff0331fc2293f25061971f6c77ff213;hp=2668b1da962e543b09dddba3e37a16d0ed233a35;hpb=9addeabf74df4ef01e4a10c9f960b362172524e8;p=govpn.git diff --git a/doc/server.texi b/doc/server.texi index 2668b1d..325d317 100644 --- a/doc/server.texi +++ b/doc/server.texi @@ -1,79 +1,87 @@ @node Server @section Server part -Except for common @code{-stats}, @code{-egd} options server has the -following ones: +Except for common @ref{Stats, -stats}, @ref{EGD, -egd}, @ref{Syslog, -syslog} +options server has the following ones: -@table @code +@table @option @item -proto -@ref{Network, network protocol} to use. Can be @emph{udp} (default), +@ref{Network, Network protocol} to use. Can be @emph{udp} (default), @emph{tcp} or @emph{all}. @item -bind Address (@code{host:port} format) we must bind to. @item -conf -Path to JSON file with the configuration. +Path to YAML file with the configuration. @item -proxy Start trivial HTTP @ref{Proxy} server on specified @emph{host:port}. @end table -Configuration file is JSON file with following example structure: +Configuration file is YAML file with following example structure: @verbatim -{ - "stargrave": { <-- Peer human readable name - "iface": "tap10", <-- OPTIONAL TAP interface name - "mtu": 1514, <-- OPTIONAL overriden MTU - "up": "./stargrave-up.sh", <-- OPTIONAL up-script - "down": "./stargrave-down.sh", <-- OPTIONAL down-script - "timeout": 60, <-- OPTIONAL overriden timeout - "noise": true, <-- OPTIONAL noise enabler - (default: false) - "cpr": 64, <-- OPTIONAL constant packet - rate in KiB/sec - "encless": false, <-- OPTIONAL Encryptionless mode - "verifier": "$argon2d..." <-- verifier received from client - }, - [...] -} +stargrave: <-- Peer human readable name + iface: tap10 <-- OPTIONAL TAP interface name + mtu: 1515 <-- OPTIONAL overriden MTU + up: ./stargrave-up.sh <-- OPTIONAL up-script + down: ./stargrave-down.sh <-- OPTIONAL down-script + timeout: 60 <-- OPTIONAL overriden timeout + timesync: 0 <-- OPTIONAL time synchronization requirement + noise: No <-- OPTIONAL noise enabler + cpr: 64 <-- OPTIONAL constant packet rate, KiB/sec + encless: No <-- OPTIONAL Encryptionless mode + verifier: $baloon... <-- verifier received from client +[...] @end verbatim At least one of either @code{iface} or @code{up} must be specified. If you specify @code{iface}, then it will be forcefully used to determine -what TAP interface will be used. If it is not specified, then up-script -must output interface's name to stdout (first output line). +what TAP interface will be used. If it is not specified, then +up-@ref{Scripts, script} must output interface's name to stdout +(first output line). For example up-script can be just @code{echo tap10}, or more advanced like the following one: -@example +@verbatim #!/bin/sh $tap=$(ifconfig tap create) ifconfig $tap inet6 fc00::1/96 mtu 1412 up echo $tap -@end example +@end verbatim Each minute server rereads and refreshes peers configuration and adds newly appeared identities, deletes an obsolete ones. -You can use convenient @code{utils/newclient.sh} script for new client +You can use convenient @command{utils/newclient.sh} script for new client creation: @verbatim % ./utils/newclient.sh Alice [...] -Your client verifier is: $argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg +Your client verifier is: $balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg -Place the following JSON configuration entry on the server's side: +Place the following YAML configuration entry on the server's side: - "Alice": { - "up": "/path/to/up.sh", - "iface": "or TAP interface name", - "verifier": "$argon2d$m=4096,t=128,p=1$bwR5VjeCYIQaa8SeaI3rqg$KCNIqfS4DGsBTtVytamAzcISgrlEWvNxan1UfBrFu10" - } -[...] + Alice: + up: /path/to/up.sh + iface: or TAP interface name + verifier: $balloon$s=32768,t=16,p=2$bwR5VjeCYIQaa8SeaI3rqg$KCNIqfS4DGsBTtVytamAzcISgrlEWvNxan1UfBrFu10 +@end verbatim + +Example configuration file: +@verbatim +stargrave: + iface: tap0 + verifier: $balloon$s=32768,t=16,p=2$VMirzcshcHuG2V4jhUsEjw$X5fC07L8k61h3S1Oro/rC76+m0oGDTA9Bq+aWJ1uOgY +slow: + iface: tap1 + encless: Yes + mtu: 9000 + cpr: 384 + verifier: $balloon$s=32768,t=16,p=2$YbIA5garDqCOhtI/2EZVNg$gOo5vcEGynmpeepNscwclicfZsWxzgYFRLbgG21EZ1U @end verbatim