Invisible Internet Project (I2P): Updates
From
warmfuzzy@700:100/37 to
All on Wed Mar 22 22:35:42 2023
I2P is now at version 2.2.0: updates as noted at www.geti2p.net ---------------------------------------------------------------
We have elected to move forward the 2.2.0 release date, which will be occurring today, March 13, 2023. This release includes a changes across the NetDB, Floodfill, and Peer-Selection components which improve the ability of the router to survive DDOS attacks. The attacks are likely to continue, but the improvements to these systems will help to mitigate the risk of DDOS attacks by helping the router identify and de-prioritize routers that appear malicious.
This release also adds replay protection to the Streaming subsystem, which prevents an attacker who can capture an encrypted packet from being able to re-use it by sending it to unintended recipients. This is a backward-compatible change, so older routers will still be able to use the streaming capabilities of newer routers. This issue was discovered and fixed internally, by the I2P development team, and is not related to the DDOS attacks. We have never encountered a replayed streaming packet in the wild
and do not believe a streaming replay attack has ever taken place against the I2P network at this time.
As you may have noticed, these release notes and the release itself have been signed by idk, and not zzz. zzz has chosen to step away from the project and his responsibilities are being taken on by other team members. As such, the project is working on replacing the network statistics infrastructure and moving the development forum to i2pforum.i2p. We thank zzz for providing
these services for such a long time.
As usual, we recommend that you update to this release. The best way to maintain security and help the network is to run the latest release.
DETAILS: Changes
i2psnark: New search feature
i2psnark: New max files per torrent config
NetDB: Expiration improvements
NetDB: More restrictions on lookups and exploration
NetDB: Store handling improvements
NTCP2: Banning improvements
Profiles: Adjust capacity estimates
Profiles: Expiration improvements
Router: Initial support for congestion caps (proposal 162)
Transports: Add inbound connection limiting
Tunnels: Refactor and improve peer selection
Tunnels: Improve handling of "probabalistic" rejections
Tunnels: Reduce usage of unreachable and floodfill routers
Bug Fixes
Docker: Fix graphs not displaying
i2psnark: Fix torrents with '#' in the name
i2psnark standalone: Fix running from outside directory
i2psnark standalone: Remove "Start I2P" menu item from systray
i2ptunnel: Fix typo in HTTPS outproxy hostname
i2ptunnel: Interrupt tunnel build if stop button clicked
i2ptunnel: Return error message to IRC, HTTP, and SOCKS clients on failure to build tunnels
NTCP2: Ensure an IPv6 address is published when firewalled and IPv4 is not Ratchet: Don't bundle wrong leaseset with ack
Router: Fixes for symmetric NAT errors on 'full cone' NAT
SAM: Interrupt tunnel build if client times out
SSU2: Fix rare peer test NPE
Sybil: Don't blame i2pd publishing ::1
Sybil: Memory usage and priority reduction
Transports: More IP checks
Other
Blocklist efficiency improvements
Bundles: Identify Win and Mac bundles in version info
Console: Identify service installs, revision, and build time in version info Console: NetDB search form and tunnels page improvements (advanced only) Router: Reduce stats memory usage
Tunnels: Reduce "grace period"
Translation updates
--- Mystic BBS v1.12 A48 2022/07/15 (Linux/64)
* Origin: thE qUAntUm wOrmhOlE, rAmsgAtE, uK. bbs.erb.pw (700:100/37)