Skip to content

Add parallel NDNd network and Go NDNCERT CAs - #43

Closed
markverick wants to merge 54 commits into
named-data:dualfrom
markverick:ndnd-ws-caddy
Closed

markverick wants to merge 54 commits into
named-data:dualfrom
markverick:ndnd-ws-caddy

Conversation

@markverick

@markverick markverick commented Oct 20, 2026 •

Copy link
Copy Markdown

Summary

  • Run NDNd/DV alongside the existing NFD/NLSR testbed without changing the /ndn deployment.
  • Add an independently rooted /ndnd network with isolated router, root CA, and site CA credentials.
  • Configure the initial UCLA, Arizona, and Memphis sites through explicit inventory prefixes; additional sites can be added through the same inventory and service configuration.
  • Add Go NDNCERT root/site services with email-domain redirects, site name assignment, and email verification.
  • Integrate NDNd certificate provisioning and renewal with the existing master bootstrap and cron flow.
  • Publish NDNd WebSocket and status endpoints through Caddy.

Future

  • WebTransport support

@tianyuan129
tianyuan129 changed the base branch from main to dual October 20, 2026 16:48
@markverick
markverick force-pushed the ndnd-ws-caddy branch 2 times, most recently from b7b3487 to 14b1a24 Compare October 21, 2026 03:03
a-thieme and others added 27 commits October 24, 2026 01:30
Updated the default strategy for root prefix to include version=5 and retransmission suppression max=1s.
…sion

Modify root prefix strategy in nfd-init.sh.j2 to increase max suppression from 250ms to 1000ms
Updated multicast strategy to include version and retx suppression.

Fixes previous commit that changed the unicast interest limits instead of multicast.
…n-limit

Modify multicast strategy settings in nfd-init.sh.j2 for a maximum interest suppression time of 1000ms instead of 250ms
Give the HTTP signer its own template directory so the renderer detects its configuration changes and restarts the signer instead of consuming them while rendering the root CA.
Pin the NDNd-network forwarder, DV, status, certificate authorities, repository and Merkle service to staging revision 993a483. Keep the NFD-connected repository and Merkle images unchanged.
Update the forwarder, DV, status, CA and NDNd-network Merkle image pins to e834064. Preserve both repository images and NFD-connected Merkle.
Select peers from each host’s existing neighbors list and retain only NDNd-enabled sites. Keep NDNd UDP transport and hop-count routing unchanged.
Advertise /ndnd through NLSR and /ndn through DV using persistent local UDP faces. Initialize BIER mappings and restore runtime entries after forwarder restarts.

Use capture on the NFD gateway route to exclude inherited parent routes, and mount only the NDNd socket directory in the temporary management helper.
Remove per-node repository image overrides and restore upstream Git update and C++ NDNCERT renewal behavior. Correct stale image documentation and document the hop-count routing limitation.
@markverick

Copy link
Copy Markdown
Author

will pull from the staging branch.

@markverick markverick closed this Oct 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants