Skip to content

v1.136.5 NETFORY WEB4.0

Choose a tag to compare

View all tags
@technologiespro technologiespro released this 21 Oct 03:35
1.136.5
7a3218b

NETFORY 1.136 Mycelium: private by design

image

Release line 1.136.1 -> 1.136.5 · Desktop (Windows / macOS / Linux) · pq-web relay node 0.6.1

This release brings Mycelium, NETFORY's own anonymity network built on Iroh QUIC (https://github.com/NETFORY/NIPs). It also adds
a rebuilt Settings experience and a long list of stability fixes for the P2P network, the wallet
and the messenger.

Mycelium: anonymous routing over Iroh QUIC

What it is

Mycelium is a layered ("mushroom") routing network that lives inside NETFORY. When it is on, your
messages and requests stop travelling straight from your device to the other side. They pass
through a chain of up to three independent relays (Guard -> Middle -> Exit). Each relay is
another NETFORY node or a pq-web server.

How it works for you

  1. Flip one switch. Turn on Settings -> Network -> Mycelium. NETFORY finds relays on its own,
    using the network directory, the tracker and built-in bootstrap nodes. No configuration needed.
  2. Chains are built in the background. A small pool of ready chains is kept warm, so the first
    message doesn't wait.
  3. See your route. The live circuit map shows every hop of every chain: You -> Guard ->
    Middle -> Exit -> destination. It includes per-hop latency, health status and a one-click
    Rebuild button.
  4. Chat as usual. Direct messages and chat sync go through Mycelium on their own. If the other
    person also runs Mycelium, the conversation uses a hidden-service rendezvous: neither of you
    ever learns the other's network address.
  5. Optional system-wide VPN. Mycelium can also carry traffic from your other apps through a
    local TUN adapter. The tray icon turns green while it's active, and you can toggle it right from
    the tray menu.

How it protects your anonymity

  • Layered encryption. Your data is wrapped in one encryption layer per relay. Each relay can
    remove only its own layer, so it sees only the previous hop and the next hop:
    • the Guard knows who you are, but not where you're going;
    • the Exit knows the destination, but not who you are;
    • the Middle knows neither.
  • Fixed-size cells. All traffic travels in equal-size cells, so message length doesn't reveal
    what you're doing.
  • Optional cover traffic adds dummy cells, which makes timing analysis harder.
  • Pinned guards. NETFORY keeps a small stable set of entry relays instead of picking a new one
    every time. This is the same defence Tor uses against relays that try to become your entry point
    to spy on you.
  • Family and diversity rules stop two relays run by the same operator from appearing in the
    same chain.
  • Hidden services. Your inbox is reachable through introduction points and a rendezvous point,
    never through your IP address.
  • Everything is authenticated. Relay announcements are signed, and Iroh checks every node's
    key, so a fake relay can't pretend to be a real one.

Why it's cool

  • Fully decentralized. There are no directory authorities. Relays announce themselves over
    gossip, and any NETFORY desktop or pq-web server can become a relay.
  • Built on QUIC, not TCP. Connections are multiplexed and encrypted, hole-punching works
    through NAT, and a relay is needed only as a fallback.
  • Self-healing. When nodes leave the network, chains rebuild themselves (details below).
  • Isolated from everything else. Mycelium runs on its own network endpoint, separate from
    the wallet, the SmartHoldem nodes and the chat. Even a busy relay can't slow down your
    transactions.

Network resilience (1.136.2)

  • Adaptive chain length. If there are fewer relays than the hops you configured, NETFORY no
    longer fails with "chains unavailable". It builds a shorter 1–2 hop chain and shows a clear
    warning. As soon as new relays join, the chain is automatically upgraded to full length.
  • Dynamic rebuilding. The network is re-checked every 10 seconds:
    • a chain with a dead hop is rebuilt with no retry limit, waiting longer between attempts
      (20 s -> 160 s);
    • relays that failed are forgiven after 5 minutes;
    • entry relays that have left the network are replaced right away.
  • Direct connections first. Relays now publish their direct IP addresses, and the tracker shares
    pq-web addresses too. NETFORY connects to relays directly over QUIC, with less dependence on
    discovery services and Iroh relay servers. This is backward compatible with older nodes.
  • Critical freeze fixed. A locking bug in the Mycelium status code could freeze background
    threads. Over time this stalled the whole app: wallet, SmartHoldem nodes and messenger. It is now
    fixed, and all routing tests pass in seconds.
  • Settings that stick. Mycelium settings, including your custom bootstrap relays, are written
    to disk immediately and kept in a backup file as well, so they survive restarts.

Diagnostics

Settings -> Network -> Diagnostics -> Iroh connections is a live panel that shows, for each
endpoint (node, messenger media, Mycelium):

  • how many connections are open right now;
  • how many connections opened and closed in the last minute;
  • home-relay changes and the current home relay;
  • connect errors and relay errors per minute.

The panel turns red when it detects a connection storm, so you can spot network trouble before
it affects you.

Also new: My Node ID is shown in network settings and copies with one click. Your own node ID
now also appears on the circuit map.

Usability

  • Settings reorganised. Network is now the first and default tab, followed by Interface.
  • Interface tab redesigned to match Network: a menu on the left (Language, Appearance, Font,
    Browser, SmartHoldem Network, Official Repository, Autostart) shows a live summary of each
    setting, and the selected section opens on the right.
  • Autostart
    • Minimize to system tray: the close button hides NETFORY to the tray, and P2P, chat and
      seeding keep running.
    • Launch at system startup: NETFORY starts quietly in the tray when you sign in.
  • Browser setting. Choose where third-party links open: NETFORY Browser (a new built-in
    tab) or System Browser. The choice applies to the messenger, dApps and pages.
  • Messenger links fixed. Links in the messenger window now open reliably, in a new tab of the
    main NETFORY window.
  • Phone-friendly layout. On narrow screens the sidebar collapses on its own. When you expand
    it, it slides over the content, and a tap outside closes it.
  • Tray VPN indicator with a quick on/off toggle.

For node operators

  • pq-web 0.6.1 is a required update for servers running --mycelium. It fixes the freeze in
    the status code and announces direct addresses for faster chain building.
  • Tracker log verified=false means only that the node is not in the PQWEB_NODES allowlist.
    Announce signatures are always checked. To mark your nodes as verified, set
    PQWEB_NODES="<id>@<REGION>,…" on the tracker. Note that this also closes open registration.

NETFORY: own your keys, own your network.

@technologiespro @bratunya2019

Contributors

technologiespro and bratunya2019
Assets 3
Loading