我们决定将 2.2.0 的发布日期提前到今天(2023 年 3 月 13 日)。本次发布包含对 NetDB、Floodfill 和 Peer-Selection 组件的一系列更改,提升 router 在面对 DDOS 攻击时的存活能力。攻击很可能会持续,但对这些系统的改进将通过帮助 router 识别并降低那些看起来具有恶意的 router 的优先级,从而有助于缓解 DDOS 攻击的风险。
本次发布还为 Streaming 子系统(流式传输子系统)增加了重放保护,这可防止能够捕获加密数据包的攻击者通过将其发送给非预期的接收者而加以重用。此更改向后兼容,因此较旧的 routers 仍然能够与较新的 routers 使用 Streaming 功能。该问题由 I2P 开发团队在内部发现并修复,与 DDoS 攻击无关。我们从未在现实环境中遇到被重放的 Streaming 数据包,并且我们不认为截至目前针对 I2P 网络发生过任何 Streaming 重放攻击。
正如您可能已经注意到,本发行说明以及本次发布本身均由 idk 签名,而非 zzz。zzz 已选择从项目中抽身,他所承担的职责正由其他团队成员接手。因此,项目正在着手替换网络统计基础设施,并将开发论坛迁移至 i2pforum.i2p。我们感谢 zzz 长期以来提供这些服务。
一如既往,我们建议您更新到此版本。维护安全性并帮助网络的最佳方式是运行最新版本。
详细信息
仅提供翻译,勿包含其他内容:
Changes
- i2psnark: New search feature
- i2psnark: New max files per torrent config
- NetDB: Expiration improvements
- NetDB: More restrictions on lookups and exploration
- NetDB: Store handling improvements
- NTCP2: Banning improvements
- Profiles: Adjust capacity estimates
- Profiles: Expiration improvements
- Router: Initial support for congestion caps (proposal 162)
- Transports: Add inbound connection limiting
- Tunnels: Refactor and improve peer selection
- Tunnels: Improve handling of “probabalistic” rejections
- Tunnels: Reduce usage of unreachable and floodfill routers
更改
- Docker: Fix graphs not displaying
- i2psnark: Fix torrents with ‘#’ in the name
- i2psnark standalone: Fix running from outside directory
- i2psnark standalone: Remove “Start I2P” menu item from systray
- i2ptunnel: Fix typo in HTTPS outproxy hostname
- i2ptunnel: Interrupt tunnel build if stop button clicked
- i2ptunnel: Return error message to IRC, HTTP, and SOCKS clients on failure to build tunnels
- NTCP2: Ensure an IPv6 address is published when firewalled and IPv4 is not
- Ratchet: Don’t bundle wrong leaseset with ack
- Router: Fixes for symmetric NAT errors on ‘full cone’ NAT
- SAM: Interrupt tunnel build if client times out
- SSU2: Fix rare peer test NPE
- Sybil: Don’t blame i2pd publishing ::1
- Sybil: Memory usage and priority reduction
- Transports: More IP checks
错误修复
- Blocklist efficiency improvements
- Bundles: Identify Win and Mac bundles in version info
- Console: Identify service installs, revision, and build time in version info
- Console: NetDB search form and tunnels page improvements (advanced only)
- Router: Reduce stats memory usage
- Tunnels: Reduce “grace period”
- Translation updates