[Battlemesh] Host Identity Protocol, any experience?

[Dave Taht]

On Mon, Nov 28, 2016 at 6:58 AM, Antonio Quartulli <a at unstable.cc> wrote:
> On Mon, Nov 28, 2016 at 02:05:25PM +0100, Linus Lüssing wrote:
>> Hi,
>>
>> Just read about this protocol a few days ago:
>>
>> https://www.cisco.com/c/en/us/about/press/internet-protocol-journal/back-issues/table-contents-43/121-host.html
>> https://en.wikipedia.org/wiki/Host_Identity_Protocol
>> https://tools.ietf.org/html/rfc7401
>>
>> Has anyone had the pleasure to play with it yet?
>>
>> Seems like it might be a necessity to support truely decentral,
>> distributed, dynamic internet uplinks in a public mesh network?
>>
>> (otherwise, everytime a node with a direct uplink vanishes, TCP
>> connections would break or would need some tunneling)
>>
>> The idea of HIP to strip the identity part from IP addresses and
>> replacing it with a layer in between, which cryptographically
>> generates identities, sounds ingenious!

I used to use hip a lot, but at least until recently nat traversal had
become a problem. It is widely embedded in some factory floor gear (as
a pre-IOT concept). It does solve one problem really thoroughly -
validating that your IP is really your IP.

In the context of battlemesh it's potentially interesting, although a
common mistake I made is offering a HIP route to the network, which
would not work, I even reached the point to where I wanted to block
that range out by default in all routing daemons.



> Isn't it like any other overlay network where a layer in between introduces a
> new logical identifier for an host/entity instead of relying on the IP?
>
> Cisco might be "stronger" in "forcing" its own protocol. But, practically, where
> would be the difference? Or am I missing something?
>
> Cheers,
>
>
> --
> Antonio Quartulli
> _______________________________________________
> Battlemesh mailing list
> Battlemesh at ml.ninux.org
> http://ml.ninux.org/mailman/listinfo/battlemesh



-- 
Dave Täht
Let's go make home routers and wifi faster! With better software!
http://blog.cerowrt.org