lokinet

This minor update to Lokinet includes some small fixes for service nodes, particularly when combined with Oxen 11 releases. It is required by Oxend 11+ when running as a service node.

Changes:

• Fixed a invalid RPC call to oxend that prevents loading of service node info from oxend 11. (The call was always incorrect, but oxend 10 silently ignored the wrong parameter and returned usable results anyway).
• Added a hack within lokinet that notices if it is in a "dead" state unable to connect to routers and automatically restarts itself. (Previously routers attached to newly registered service nodes could occasionally get "stuck" in an unreachable state which could lead to a decommission several hours after the initial registration). [Note: this change was already included in the 0.9.12 release available in our apt repository but not formally released on github].

Updating service nodes

For service node operators using Debian 11+ and Ubuntu 20.04+, the upgraded packages are available from our APT repository. Static binaries for other users are available below.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Signed SHA256 hashes of release files. These are signed using Jason's GPG
key available at:
 - the oxen-io/oxen-core repository, at /utils/gpg_keys/Jason.asc
 - OpenPGP key servers (Jason Rhinelander <[email protected]>, A88D4262)
 - https://imaginary.ca/public.gpg
 - https://github.com/jagerman.gpg

c079d7857f659422dbac60ab2e89f93f877b48230a71999f17ba73f3d3e1c6a4  lokinet-linux-amd64-v0.9.13.tar.xz

-----BEGIN PGP SIGNATURE-----
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=ITjK
-----END PGP SIGNATURE-----

This minor update to Lokinet fixes a few issues introduced in the 0.9.10 release.

For service nodes, this releases is recommended as part of regular upgrades, but is not required.

All platforms

• Fixed missing option names in the default config file generated in 0.9.10 (#2055).
• The GUI minimum height is now reduced to work better on lower resolution screens (#2065).
• An(other) obsolete bootstrap file is now recognized and skipped if present when loading (#2066).

Windows

• Fixed a rare bug that could cause all DNS lookups (not just lokinet) to start working whenever Lokinet is activate (#2076).

Service nodes

• We now output a much more informative error on startup if the required lokid RPC setting is missing from the config (#2055).

(Edit: added the lokinet source tarball to the download list and re-signed)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Signed SHA256 hashes of release files. These are signed using Jason's GPG
key available at:
 - the oxen-io/oxen-core repository, at /utils/gpg_keys/Jason.asc
 - OpenPGP key servers (Jason Rhinelander <[email protected]>, A88D4262)
 - https://imaginary.ca/public.gpg
 - https://github.com/jagerman.gpg

0a4a972e1f2d7d2af7f6aebcd15953d98f4ff53b5e823a7d7aa2953eeea2c8d2  lokinet-0.9.11-win64.exe
a796134d3af1cfa2d3718166aede6a09155c63617ffb7de932a9c804bb3a68c7  lokinet-macOS.0.9.11.dmg
c16c82c7528beae5ceca072eaf6e1a9eb4b85247f1d60352344b5ee53009391c  lokinet-v0.9.11.tar.xz
-----BEGIN PGP SIGNATURE-----
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=JvWP
-----END PGP SIGNATURE-----

Lokinet 0.9.10

This is a major upgrade for Lokinet clients that brings a brand new GUI with many improvements, plenty of client-side fixes and upgrades, a new more reliable network handling code for Windows, and a completely overhauled macOS release (which has been absent for the past several releases).

For service nodes, this releases is recommended as part of regular upgrades, but is not required.

All platforms

• We now include the lokinet bootstrap file in the executable itself rather than needing to bundle or download it separately. This is now the default if no bootstrap file is specifically configured.
• Refactored log subsystem that produces better, cleaner log output.
• logs can now be sent to a subscriber via our zmq rpc, which is used by the new GUI to show log output.

All clients

• New GUI written in electron.
• Large refactor of DNS subsystem internals

Windows client

• We now use wintun instead of the old OpenVPN tun/tap driver for the low-level virtual lokinet network. Wintun is more reliable and better maintained.
• We now use windirect to properly intercept and handle system DNS requests, which more robustly captures DNS traffic and should prevent DNS leaks that have previously happened sometimes in Windows.
• Fix various crashes that could occur on startup or shutdown.

MacOS client

• Lokinet now supports macOS again. (This is our first macOS release in quite a while, so if things aren't working quite right, please report the issues!)
• We had previously stopped supporting it because our workaround to run on macOS stopped working: this new release uses proper Apple-sanctioned interfaces to run as a VPN system extension.
• Because it is now registered as a VPN, you can start/stop lokinet from the macOS Network Settings page; the GUI still works to control/monitor Lokinet, but doesn't have to be running in order for Lokinet to be active.
• Unfortunately, Apple does not allow unsigned (or self-signed) code to run as a system extension, which means you cannot compile for yourself on macOS (unless you have your own, paid-for developer account). We wish this wasn't the case, but if this matters to you then macOS is the wrong platform for you.

Linux client

• Lokinet DNS resolver can now bind to multiple UDP addresses to handle queries.
• By default Lokinet DNS still binds to 127.3.2.1:53, but not also listens on random high port on 127.0.0.1 for better compatibility with systemd-networkd.
• added a new option (disabled by default) to enable raw DNS packet interception on on the lokinet vpn interface for advanced network configurations.

Service-node changes

• Add a log statement about our own .snode address on startup
• Overhaul how listen IPs/ports are specified in the [bind] section of the config. The old syntax was confusing. Most common setups will continue to work just fine, but some exotic configurations on systems with multiple IP addresses may need the config fixed (if this is necessary, lokinet will immediately fail at startup with a suitable error message in the logs).
• Revise how we handle service node lists after startup and registration activation, which should address reported issues about lokinet needing a restart after being staked.
• Lokinet now recognizes (and ignores) an old, obsolete bootstrap file that might be present on very old installations (installed around 2 years ago or more). This obsolete file could prevent a router that goes offline for several days from coming back online, because it would lose any way to connect to existing nodes. If we encounter such a file we now just ignore it, and use the built-in default fallback.

Build system

• Remove some dead code
• Simplify handling of libraries that can either be built as a submodule or used as a system library.
• Make lokinet version tag overrideable via -DLOKINET_VERSIONTAG (this has been patched into the deb builds for a very long time; this moves tha

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

= lokinet v0.9.9 (gluten free edition)

Service node only release for hf 19,
this release is manditory for all service nodes.

= service node changes

* bind section no longer allows 0.0.0.0 for inbound links, use your interface name and set public-ip and public-port in router section, boxes with multiple public addresses on one interface required this change be done.
  if 0.0.0.0 is used and lokinet can infer a public ip, it will be used, otherwise it will error and need to be reconfigured with the proper entries in router section.
* bugfix in link layer state machine that should fix inbound sessions becoming in a permanently stuck state
* systemd status line reports more useful info like block hieght and gossip times.
* bugfixes regarding gossping and decommissions related to lokinet reachability
* idempotent queue flushing, all path builds and transit traffic should be butter smooth as a result.

= client side (non service node) changes

== windows

windows now has a new gui, dns leaks but ipv6 leak should be plugged.
expect remaining fixes in 0.9.10 tag

== config options

network section

* exit-node / exit-auth now allow multiple entries , exit nodes will be striped randomly for each range they are mapped to
* autorouting , turn route poker on and off
* blackhole-routes , turn off route poker's ipv4 / ipv6 route blackholing. useful for omitting non routable ranges like 200::/7 and fc00::/7 from route poker
* auth-file / auth-file-type , enable endpoint auth using hashed or plaintext passwords (hashed by default)
* auth-static , add static plaintext auth codes via config entry

dns section

* uptream will now default to 9.9.9.10

== cli

* removed -b flag, it did not do anything anyways.
* removed -v / --verbose flag, use config option in logging section, level = debug

== docs

* generate internal docs with doxygen
* remove outdated content, replace with placeholders

== build system

* new helper script: contrib/cross.sh for cross compiling from linux.
* macos build process redone in full, still not done yet.

=== new cmake options

* -DBUILD_DAEMON for toggling building of lokinet daemon, used only on apple platforms.
* -DWITH_BOOTSTRAP for toggling building of lokinet-bootstrap tool

== internals

* removed large amounts of dead code
* use oxenc for serializion insted of oxenmq
* split up cpack nsis commands into external files
* split up android build process into configure and build to fully parallize builds.
* embedded lokinet apis frozen.
* embedded lokinet internals finished.
* demacroize the code
* disable usage of ipv6 upstream dns in libunbound
* propagate link layer priority to link layer for proper resend prioritization

= release binaries

sha256 hashes for lokinet v0.9.9

signed by [email protected] 
key at https://lokinet.io/jeff.asc or http://lokinet.loki/jeff.asc

86f3624cc29ead3f5d0fb8281763315fd26ffe5b57a70876ce8700511908e45b  lokinet-0.9.9-win64.exe
084a515103f32d8dcb519837054348b04e35157dd062e87bbee38b214973b72c  lokinet-v0.9.9.tar.xz


the current bitcoin top block is:

best=00000000000000000005a372e7d48a080460d5249fbe5238e037314b9da4c8e2 
height=738737
date='2022-05-31T14:24:36Z'
-----BEGIN PGP SIGNATURE-----

iIYEARYIAC4WIQQs5vJ0MTiCW3p+Uh0CXALuOgkvLQUCYpYqgBAcamVmZkBsb2tp
bmV0LmlvAAoJEAJcAu46CS8tc2cA/368jR4l7bob+0FVtrQ6A17j/CA7xu45QCRl
X3QkR6W5AQDp8jYrL9pB0HWWrE5xlWQG9WxYt7L7Sp+ow/78ArqmAQ==
=joQh
-----END PGP SIGNATURE-----