You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

4.2 KiB

Communities

Names

As communities designate virtual networks, they must be distinguishable from each other. Its their name that makes them distinguishable and which therefore should be unique per network. The community name is composed of 19 byte-sized characters and it internally always is terminated by an additional zero character totalling up to 20 characters. Hence, the zero character cannot be part of the regular community name. There are some other characters that cannot be used, namely . * + ? [ ] \.

To make full use of character space, hex values could be used, e.g. from Linux bash applying the edge … -c $(echo -en '\x3a\x3b\x4a\x6a\xfa') … command line syntax. If used with a configuration file, the bytes must be directly filled as characters into a corresponding -c :;Jjþ line.

Restrict Supernode Access

By default, a supernode offers its service to all communities and allows them to connect. If a self-setup supernode shall handle certain communities only, the supernode can be given a list of allowed communities. This list is a simple text file containg the allowed community names, one per line:

 # community.list (a text file)
 -----------------------------------------------------
 myCommunity
 yourCommunity

This file is provided to the supernode through the -c community.list command line parameter. This example would allow the supernode to only accept connections from communities called "myCommunity" and "yourCommunity", these are fixed-name communities.

Somewhat Flexible Community Names

If you want to allow all community names from a certain name range, e.g. from "myCommunity00" to "myCommunity99", the community.list file (or whatever you name it) could look as follows:

 # community.list (a text file)
 -----------------------------------------------------
 myCommunity[0-9][0-9]

Advanced users recognize the so called regular expression. To prevent users from stop reading, the author did not dare to name this section "Regular Expressions". Anyway, community names can be provided as regular expressions using the following placeholders:

 '.'        Dot, matches any character
 '*'        Asterisk, match zero or more of previous element (greedy)
 '+'        Plus, match one or more of previous element (greedy)
 '?'        Question, match zero or one (non-greedy)
 '[abc]'    Character class, match if one of {'a', 'b', 'c'}
 '[^abc]'   Inverted class, match if NOT one of {'a', 'b', 'c'}  (feature is currently broken)
 '[a-zA-Z]' Character ranges, the character set of the ranges { a-z | A-Z }
 '\s'       Whitespace, \t \f \r \n \v and spaces
 '\S'       Non-whitespace
 '\w'       Alphanumeric, [a-zA-Z0-9_]
 '\W'       Non-alphanumeric
 '\d'       Digits, [0-9]
 '\D'       Non-digits

Knowing this, we can as well express the exemplary community.list above the following way:

 # community.list (a text file)
 -----------------------------------------------------
 myCommunity\d\d

Also, as the . * + ? [ ] \ characters indicate parts of regular expressions, we now understand why those are not allowed in fixed-name community names.

Header Encryption

By default, the community name is transmitted in plain witch each packet. So, a fixed-name community might keep your younger siblings out of your community (as long as they do not know the community name) but sniffing attackers will find out the community name. Using this name, they will be able to access it by just connecting to the supernode then.

Header encryption can be enabled to prevent plain transmission. It is important to understand that header encryption, if enabled, only works on fixed-name communities. It will not work on community names described by regular expressions.

On the other hand, the provision of fixed-name communities blocks all other, non-listed communities. To allow a mixed operation of certain encrypted and hence fixed-name communities along with all other open communities, the following "trick" can be applied:

 # community.list (a text file)
 -----------------------------------------------------
 mySecretCom
 .*

This is not really a trick but just making use of a very permissive regular expression at the second line.