go-ipfs-plugin-i2p-gateway

Plugin for presenting an IPFS gateway over i2p.

WARNING: This is only the gateway part, A.K.A. the easy part. It will make your IPFS gateway accessible via i2p clients, but it will not route communication between IPFS nodes over i2p(1). This means that it doesn't make your IPFS instance anonymous, it just makes it accssible to clients anonymously(2). As such, it's probably not that useful to people in general yet. It's also emphatically not a product of the i2p Project and doesn't carry a guarantee from them. File an issue here, I'm happy to help.

Also, even if your IP address and/or location are obfuscated, your IPFS identity is unique. You can serve information to anonymous users, but you have an identity which corresponds to the IPFS node that you are using(No different to the key fingerprint of an SSH server). If it isn't possible to associate it to a real-life identity or organization, and can't be correlated with a real physical location, then it could be regarded as "pseudonymous."

Todo: For right now the plugin exposes the HTTP and RPC API's only. It's possible to talk directly to the coreAPI now, and soon, it will do so.

How it works

It simply takes advantage of the plugin system to set up some hidden services when the IPFS plugin is initialized. It does this by reading the IPFS config file to find the ports that have been configured by the admin running IPFS, then using the SAM API to forward those ports to I2P. Once they are forwarded, a config file is generated containing the i2p configuration and it's base32 and base64 addresses. This is stored in a file called "i2pconfig." Finally, it simply forwards the IPFS gateway to I2P.

Installation And Setup

The gotcha to the IPFS plugin system is that you'll need to run an IPFS node, that is using the same version of IPFS which was used to build the plugin. Due to gx being extensively used by the IPFS project, and it being hard to work with, you will not be able to use it with any IPFS daemon that wasn't built from the code within the vendor/github.com/ipfs/go-ipfs folder of this repository. This is somewhat undesirable, but it is the only way to reliably run this plugin. At the time of this commit, the go-ipfs commit we use is df373ca3876ed4f706d8635c200c973f4189fcc6. Over time hopefully we can imrpove this system, and make it usable with released versions of IPFS. As such, all dependencies are vendored with this repository.

To build the IPFS version needed to use this plugin run make ipfs which will copy the built ipfs binary to $GOPATH/bin. After that, the usual IPFS setup is needed which won't be covered here.

Running the deps target pulls in the dependencies, and the build target profile builds the plugin. Since there's no "main" function you can't "go get" the plugin package, you have to clone it.

    git clone https://github.com/RTradeLTd/go-ipfs-plugin-i2p-gateway
    make deps build

Installing and Using it

Assuming you have IPFS_PATH set, you can simply:

    make install

Again, this plugin only shows the IPFS gateway, it does not make you anonymous. Once you have it in your plugin directory, restart the IPFS daemon and the plugin should load. Retrieve the base32 address from the config file and visit the page in ~5-30 minutes.

Notes:

(1) I'm going to do that too, but that's the hard part(the plan is to adapt BiglyBT-style bridging, with a pure-clearnet peers, clearnet-to-i2p peers, and pure-i2p peers. That may be less straightforward than the simple description made it sound).

(2) Of course, that leaves the matter of i2p-compatible IPFS applications but those are almost as simple as the gateway.