Its actually running on a separate physical device. I wanted to put in the media server itself, but my container network skills aren't great and that server get taken down from time to time for me to mess with. Uptime matters here, so it made sense to keep i2p separated from the server.

i don't know what you did as far as containerizing/vm but i'd expect it's got something to do with that assuming there isn't something upstream blocking it. i2p routers will work best opening the TCP/UDP port so it will allow incoming connections

I better isolated the i2pd machine on my network just in case something goes wrong with it and I don't notice right away. While doing so, I noticed roughly half the connections to the i2p relay port are being blocked by my firewall. Strangely, the firewall is set to allow all on that port. It says it's blocking based on ingress firewall's IP filtering rules.

What rules? I didn't give it any rules. If it's unsolicited, it's blocked, but the i2p relay is requesting those connections so the firewall shouldn't be blocking them, right?

i'm not sure about SAM since this is qbit, but with I2CP running either biglybt or snark can be glitchy on separate machines especially with i2pd, java seems to handle random disconnects better where i2pd might not recover, possibly due to latency. As far as i know I2CP is intended to be used on the same machine. you can do this but it runs much better with java routers from what i've found where i think i2pd is best if you keep it on the same machine.

possibly things to check - trackers are working since no dht, in a good swarm, tunnel quantity/number of hops. like are peers available or is it a throughput issue

I got it working. qbittorrent in a rootless podman container on a media server and the relay elsewhere on the network. Unfortunately, the performance is quite poor. I'm aware this is going to be slower than clearnet torrenting, but I'm only getting around 5KiB/s. That seems off to me.

It has been in development for 9 months. If you decide to test it out, please let me know if you run into any issues.

seems cool. not sure on safety though since it's new but i'd test it out

I used to play around with different bittorrent clients for weeks when I first found out about I2P. I tried i2psnark, qbittorrent, XD, BiglyBT but now I have settled using qBittorrent-nox with SAM protocol to i2pd node. Both are on same computer, because I read from IRC that its not good to have them on seperate computers. I mean your i2pd node and your qbittorrent client.

I have disabled DHT, PEX and other stuff in qBittorrent and I only download torrents from the Postman Tracker.

Awesome to see the developer here. How long did it took to "rewrite" the code using Rust? I am so new to these things that I have no clue where to even begin. Lol. I will definitely spin up a test server during summer time and contribute as much as possible for the project. Keep up the good work!

I agree with what zzz said. The project is in the early phase so it's still missing a lot of features and "institutional knowledge" that java and i2pd have. I hope that by EoY most of the missing features have been implemented and the most glaring bugs have been fixed.

All help with testing and development is deeply appreciated.

Thanks for the info! The one-person project popping out of nowhere makes me a bit wary, so I’ll wait for SSU2 to work properly before diving in. I do host an eepsite, but I’ll hold off using Emissary for that until it’s more polished. Wish I had a spare computer to test it out safely!

Rust Tor implementation Arti 1.0.0(Onion, I2P)
Tor Project describes about benefit of Rust language. Tor Project needed a year to release stable Arti.

re: safe to use? depends on your risk tolerance and threat model.

The code quality and completeness is very high. Rust is a "safe" language that eliminates a lot of possible issues. But this is a one-person project that just appeared out of nowhere, it will need a lot of testing and review to gain confidence. There's a lot of subtleties in i2p protocols that, if implementers are not careful, may lead to deanon, crashes, etc.

It does have UPnP/NATPMP to open firewall ports. if you're not on a direct IP and it can't open your firewall ports, it's not going to work well, because its SSU2 implementation isn't done, so it can't do peer test and relay.

For now, I wouldn't use it for eepsite hosting if you're concerned about possible deanon. Safe for running with qbittorrent or i2psnark-standalone? Depends on your threat model.

It also may not "look" exactly like other routers, so it may be apparent that there's an emissary running on your IP.

For brave people, please start testing and opening github issues for any problems you find.

this is fucking hot as hell mad respect i'd love to experiment

Interesting. How safe can it be to use? Also can it increase speeds of I2P network? I am really new to i2p so enlighten me :p

Thank you!

Awww, so cute!

Been using this a while. Handy extension.

For I2P+, the fix for errors is already available via the in-console update paths:

• http://skank.i2p/i2pupdate.zip
• http://skank.i2p/dev/i2pupdate.zip

Personally, I've been using older models allowing at least majority neutering of Intel management engine.

coreboot Thinkpads come to mind.

My personal machines are not the "full ME removal", but vast majority partitions, leaving just what is needed to bring up hardware.

Outside this, there are more "modern" options out there from companies, albeit not removed in same way (disabled under HAP bit and others). Some prefer Arm.

But everyone has a different use cases. I want to be able to use Qubes as an option at times, and some older models are not capable of this. T430 (i5-3320M and greater CPU) and later mostly have the right virtualization options for it.

I see UEFI / BIOS being #1 concern along with some network cards that work along with it. Some for AMT.

It is a shame there aren't more options out there.

I have heard about Intel putting backdoors in their chips. Is there a good alternative? The puri.sm librum computers theoretically wouldn't be safe, since I believe that they use intel chips.

Possibly related: https://repo.radeon.com/rocm/manylinux/rocm-rel-6.3.4/

test

Nice to see this being a flagship feature this time around especially as a Linux user.

Better time than ever for me to finally ditch my iPhone for a Librem 5, I guess.