Proxy mode

[cofob]

Proxy mode (http/socks) like in i2p or tor. This will allow you to use full node addresses (for example, <publickey>.yggip to protect against address spoofing) and also run yggdrasil without superuser rights (now you need to create a tun interface).

[cofob]

It can also be useful for building a browser extension. (#381)

[neilalexander]

Dupe of #745.

[xialvjun]

Proxy Mode can also be run in non root permission.

[neilalexander]

This discussion comes up a lot and the reason we don't do it is always the same — in order for proxy mode to be able to talk to any non-proxying Yggdrasil host, we would need to embed most of an IPv6 stack and a TCP implementation into Yggdrasil. That's a lot of code, a lot of surface area to go wrong and more than we really need at this stage for an experimental project.

[majestrate]

there is gvisor's netstack but that project tends to be highly temperamental as an upstream dep. from my own passive observations and mildly effort exerted toys that use them i wish they were a lot more stable.