Reticulum – Decentralized Mesh Network
摘要
Reticulum 是一个基于密码学的组网协议栈，旨在利用现成硬件构建本地及广域网络，并能在高延迟、极低带宽等恶劣条件下运行。其愿景是让任何人都能运营自主的通信网络，构建无开关、无监控、无审查、无控制的互联网络。文章列举了其核心特性：数据包不含源地址；地址空间无中心控制，任何人可按需分配；地址生成后可在数秒至数分钟内实现全球可达；地址具有自我主权且可物理迁移；所有通信默认使用强加密，密钥为临时密钥并提供前向保密；网络中无法建立未加密链路或发送未加密数据包，未加密包会被目的地丢弃。
荐读理由
这套加密网状网络协议栈可直接作为自建通信层的架构参考，其无源地址、默认前向保密的设计能帮你规避中心化网络的审查与单点故障，适合评估接入自有项目
原文
Deutsch | English | Español | Nederlands | Polski | Português | Türkçe | Українська | 日本語 | 简体中文Reticulum | Start | Hardware | Connect | Manual | Cryptography | Credits | Source | Donate
Reticulum
Reticulum is the cryptography-based networking stack for building local and wide-area networks with readily available hardware. Reticulum can continue to operate even in adverse conditions with very high latency and extremely low bandwidth.
The vision of Reticulum is to allow anyone to operate their own sovereign communication networks, and to make it cheap and easy to cover vast areas with a myriad of independent, interconnectable and autonomous networks. Reticulum is Unstoppable Networks for The People.
Reticulum is not one network. It is a tool for building thousands of networks. Networks without kill-switches, surveillance, censorship and control. Networks that can freely interoperate, associate and disassociate with each other. Reticulum is Networks for Human Beings.
From a users perspective, Reticulum allows the creation of applications that respect and empower the autonomy and sovereignty of communities and individuals. Reticulum provides secure digital communication that cannot be subjected to outside control, manipulation or censorship.
Reticulum enables the construction of both small and potentially planetary-scale networks, without any need for hierarchical or beaureucratic structures to control or manage them, while ensuring individuals and communities full sovereignty over their own network segments.
Notable Characteristics
While Reticulum solves the same problem that any network stack does, namely to get data reliably from one point to another over a number of intermediaries, it does so in a way that is very different from other networking technologies.
Reticulum does not use source addresses. No packets transmitted include information about the address, place, machine or person they originated from.
There is no central control over the address space in Reticulum. Anyone can allocate as many addresses as they need, when they need them.
Reticulum ensures end-to-end connectivity. Newly generated addresses become globally reachable in a matter of seconds to a few minutes.
Addresses are self-sovereign and portable. Once an address has been created, it can be moved physically to another place in the network, and continue to be reachable.
All communication is secured with strong, modern encryption by default.
All encryption keys are ephemeral, and communication offers forward secrecy by default.
It is not possible to establish unencrypted links in Reticulum networks.
It is not possible to send unencrypted packets to any destinations in the network.
Destinations receiving unencrypted packets will drop them as invalid.
这条对你有帮助吗？