|
17 | 17 |
|
18 | 18 | #### 🎯 AutoTLS: Automatic Certificates for libp2p WebSockets via `libp2p.direct`
|
19 | 19 |
|
20 |
| -This release introduces an experimental feature that significantly improves how browsers can connect to Kubo node. |
21 |
| -Opt-in configuration allows Kubo nodes to obtain CA-signed TLS certificates for [libp2p Secure WebSocket (WSS)](https://github.com/libp2p/specs/blob/master/websockets/README.md) connections automatically. |
| 20 | +<img src="https://github.com/user-attachments/assets/51af045b-eff7-414f-b52b-0d1f222d74a3" width="300px" /> |
22 | 21 |
|
23 |
| -See [`AutoTLS`](https://github.com/ipfs/kubo/blob/master/docs/config.md#autotls) configuration for details how to enable it. We appreciate you testing and providing an early feedback in [kubo#10560](https://github.com/ipfs/kubo/issues/10560). |
| 22 | +This release introduces an experimental feature that significantly improves how browsers ([Helia](https://helia.io/), [Service Worker](https://inbrowser.link)) can connect to Kubo node. |
| 23 | + |
| 24 | +Opt-in configuration allows a publicly dialable Kubo nodes (public IP, port forwarding, or NAT with uPnP) to obtain CA-signed TLS certificates for [libp2p Secure WebSocket (WSS)](https://github.com/libp2p/specs/blob/master/websockets/README.md) connections automatically. |
| 25 | + |
| 26 | +> [!TIP] |
| 27 | +> To enable this feature, set `AutoTLS.Enabled` to `true` and add a listener for `/tls/sni/*.libp2p.direct/ws` on a separate TCP port: |
| 28 | +> ```diff |
| 29 | +> { |
| 30 | +> + "AutoTLS": { "Enabled": true }, |
| 31 | +> "Addresses": { |
| 32 | +> "Swarm": { |
| 33 | +> "/ip4/0.0.0.0/tcp/4001", |
| 34 | +> + "/ip4/0.0.0.0/tcp/4002/tls/sni/*.libp2p.direct/ws", |
| 35 | +> "/ip6/::/tcp/4001", |
| 36 | +> + "/ip6/::/tcp/4002/tls/sni/*.libp2p.direct/ws", |
| 37 | +> ``` |
| 38 | +> After restarting your node for the first time you may need to wait 5-15 minutes to pass all checks and for the changes to take effect. |
| 39 | +> We are working on sharing the same TCP port with other transports ([go-libp2p#2984](https://github.com/libp2p/go-libp2p/pull/2984)). |
| 40 | +
|
| 41 | +See [`AutoTLS` configuration](https://github.com/ipfs/kubo/blob/master/docs/config.md#autotls) for more details how to enable it and what to expect. |
| 42 | +
|
| 43 | +This is an early preview, we appreciate you testing and filling bug reports or feedback in the tracking issue at [kubo#10560](https://github.com/ipfs/kubo/issues/10560). |
24 | 44 |
|
25 | 45 | #### 📦️ Dependency updates
|
26 | 46 |
|
27 | 47 | - update `ipfs-webui` to [v4.4.0](https://github.com/ipfs/ipfs-webui/releases/tag/v4.4.0)
|
28 |
| -- update `boxo` to [v0.24.1](https://github.com/ipfs/boxo/releases/tag/v0.24.1) + [v0.24.2](https://github.com/ipfs/boxo/releases/tag/v0.24.2) + [v0.24.3](https://github.com/ipfs/boxo/releases/tag/v0.24.3) |
| 48 | +- update `boxo` to [v0.24.1](https://github.com/ipfs/boxo/releases/tag/v0.24.1) + [v0.24.2](https://github.com/ipfs/boxo/releases/tag/v0.24.2) + [v0.24.3](https://github.com/ipfs/boxo/releases/tag/v0.24.3) |
29 | 49 | - This includes a number of fixes and bitswap improvements, and support for filtering from [IPIP-484](https://specs.ipfs.tech/ipips/ipip-0484/) in delegated HTTP routing and IPNI queries.
|
30 | 50 | - update `go-libp2p` to [v0.37.0](https://github.com/libp2p/go-libp2p/releases/tag/v0.37.0)
|
31 | 51 | - This update required removal of `Swarm.RelayService.MaxReservationsPerPeer` configuration option from Kubo. If you had it set, remove it from your configuration file.
|
|
0 commit comments