Design principals include that it should be without Single Point of Failure, make usage of full encryption, use RFC1918 ip ranges, scales well on >100 connected networks and is being able to run on a embedded hardware you will find in our todays router.
It should be designed that noone sees other peoples traffic.
It should be mainly autoconfig as in that besides the joining node no administrator of the network should be in the need to acutally do something when a node joins or leaves.
If you want to find a solution for a Network without Single Point of failure, has – due to Voice over IP – low latency and that noone will see other peoples traffic you end up pretty quick with a full mesh based network.
Therefore we came up with the tinc solution. tinc does a fully meshed peer to peer network and it defines endpoints and not tunnels.
ChaosVPN connects hacker wherever they are. We connect roadwarriors with their notebook. Servers, even virtual ones in Datacenters, Hackerhouses and hackerspaces. To sum it up we connect networks – maybe down to a small /32.
So there we are. ChaosVPN is working and it seems the usage increases, more nodes join in and more sevices pop up.
Installation dependency package
If you get an “E: The package bison is not available for the candidate” error, please add them to your sources.list filedeb http://ift.tt/2t7pnCI stable chaosvpndeb-src http://ift.tt/2t7pnCI stable chaosvpnapt-get update
apt-get install chaosvpn
If the error can not be installed
deb http://ift.tt/1TPNqgR wheezy/updates main
apt-get install libssl1.0.0
apt-get install chaosvpn
For tinc and chaosvpn docking operationmkdir -p /etc/tinc/chaos
tincd –ne=chaosvpn –generate-keys=2048if you get “Error opening file `/etc/tinc/=chaosvpn/rsa_key.priv’: No such file or directory” error, then run a command:mkdir /etc/tinc/chaos/ecdsa_key.priv
executedtincd –ne=chaosvpn –generate-keys=2048
run commandvi /etc/tinc/chaosvpn.conf
Change parameters$ my_vpn_ip = 172.31。。[1-255]Only use a-z, 0-9 and underline
Ip address to be changed to 172.31.x.x
Save the exit.
you have to join chaosVPN also must write a letter of introduction to indicate your motive, send mail to firstname.lastname@example.org
If you join, in the terminal input chaosvpn, you can see some information.
The contents of the letter of introduction are:
Start chaosVPN/etc/init.d/chaosvpn start
View the chaosvpn network portroute -n
The post Installation & Configuration ChaosVPN appeared first on Penetration Testing.