Private Network Implementation

Help Old FAQ
1

From @alikic on Thu Jun 02 2016 03:20:57 GMT+0000 (UTC)

I need to set up a private IPFS network on the internet. I am trying to find the simplest solution that will hold until some more robust schema (PKI?) is in place. I am thinking of having a host (central authority) that hosts a list of trusted nodes (with public keys). Each node would have to log in to the host to retrieve the list of trusted nodes (and maybe initialize bootstrap). During secure connection handshake, a peer would cancel handshake should the provided public key is not from trusted set (or should the other peer cannot prove that it also holds the private key). Essentially, the nodes trust each other because both are trusted by the host (central authority) Does this make sense?

Assuming this makes sense, what would be a clean way to implement this feature and be accepted for inclusion into IPFS code base? My first thought is to have an interface called, say, TrustManager, that would be used during handshake. Different implementation would provide solutions for different trust schemas. Any thought?


Copied from original issue: https://github.com/ipfs/faq/issues/128

2

Wondering whether there’s any new info / progress / docs on the topic of creating a closed private IPFS network.

Thanks.

  • Apologies if straight-out replying is an inappropriate way of bumping up old discussions but I didn’t see any other way on this page.
3

@sfertman yes, Private Networks are currently supported on go-ipfs since a couple of months.

Docs: https://github.com/ipfs/go-ipfs/blob/master/docs/experimental-features.md#private-networks

1 Like