Rhizomatic Network | AS4242420291

Welcome to the DN42 Autopeer service. This dashboard creates, updates, or removes a BGP peer on my DN42 node. You can skip guide to Peering.

欢迎使用 DN42 Autopeer 服务。这个面板可在我的 DN42 节点上创建、更新或删除 BGP peer。你可以点击跳过引导直达 Peering，或使用手动 Peering

You could check partial status of peering at Grafana Public Dashboard.

你可以使用 Grafana 公开面板查看部分 Peer 状态：

View Peers

The supported tunnel type is WireGuard®. You can sign a request with OpenSSH or OpenPGP.

支持的隧道类型是 WireGuard®。你可以使用 OpenSSH 或 OpenPGP 签名请求。

How to generate the challenge - 如何生成应答验证码

To prove ownership of your ASN, sign the request with a private key (corresponding to the pubkey from your DN42 Registry maintainer object).

为了证明你的 ASN 所有权，请使用你的 DN42 注册表 maintainer 文件中填写的公钥的对应私钥对即将生成的请求进行签名。

Each peer name identifies one machine under your ASN. Use a different name for each machine, and reuse that name for updates or deletion.

每个 peer name 标识你的 ASN 中的一台机器。请为不同机器使用不同名称，并在更新或删除时指定对应名称。

Peering

name	IATA	City	FQDN	Stack	ISP
abhoth	NRT	Tokyo	jp-tyo-1.dn42.nyaw.xyz	Dual	DMIT
nodens	NRT	Tokyo	jp-tyo-2.dn42.nyaw.xyz	Dual	OCI
yidhra	SIN	Singapore	sgp-1.dn42.nyaw.xyz	Dual	PanStar

Configure DN42 Peering

Select Target Node

Your ASN

Peer Name

Use lowercase letters, digits, or hyphens. Use a different name for each machine.

Endpoint (Optional)

MTU (Optional, default 1420)

Link-local addresses

Preview from the entered ASN

Manually set link-local addresses

Configure Your BGP IP on your WireGuard interface. Use Nyaw BGP IP as the BGP neighbor address. Both use fe80::(ASN >> 16):(ASN & 0xffff).

WireGuard Public Key

Get a single-use challenge, then run the generated command.

# Please fill out your ASN to generate the challenge command.

Challenge Auth (PGP/SSH Key)?

The authentication public key must be listed in your DN42 registry mntner object.

For PGP Keys: Only ASCII Armored Detached Signatures are supported. You must sign the challenge using the --armor --detach-sign flags. Cleartext signatures (e.g., matching --BEGIN-PGP-SIGNED-MESSAGE--) or binary signatures will fail verification.

Search your mntner

Challenge Signature

If you change a signed field, the challenge in the form becomes invalid. Request a new challenge, run the generated command, and paste the detached signature.

如果你更改已签名的字段，表单中的应答验证码将变为无效。请请求一个新的应答验证码，重新运行生成的命令，并粘贴签名。

For an update, an empty endpoint keeps the current value. To remove the current endpoint, select Clear the current endpoint, leave MTU value empty to set MTU to 1420 (default).

在 Update 操作中，如果 Endpoint 为空，将保留当前值。若要移除当前端点，请选择 Clear the current endpoint，MTU 值留空以设定 MTU 为 1420 (default)。

The create response shows the actual WireGuard listen port on my side. If another peer already uses the preferred port, the service increments the port number.

创建响应会显示我端实际的 WireGuard 监听端口。如果另一个 peer 已经使用了首选端口，该服务会递增端口号。

Agent-Friendly Peering - 智能体友好型对等连接

Notice

APIs and skills provide only the standard integration interface on this end. Humans should carefully review the LLM's configuration scheme to adapt it to their own complex routing requirements.

API 和 Skill 仅提供此端的标准接入形态，建议人类介入仔细审核 LLM 的配置方案以适配复杂路由需求。

Install the bundled nyaw-dn42-autopeer skill from GitHub:

从 GitHub 安装 nyaw-dn42-autopeer skill:

npx skills add oluceps/dn42-autopeer

Select your coding agent and installation scope when the CLI asks. The skill reads the live OpenAPI specification, gets a single-use challenge, and prepares the signed request. Supply your ASN, peer name, public endpoint, and the path to a registered maintainer signing key. The agent can generate a WireGuard key pair locally and return the exact WireGuard and BGP settings from the API. Private keys stay on your system.

和安装指引谈话直到安装完成。 skill 将读取 OpenAPI specification，获取单次应答验证码，并准备签署请求。提供你的 ASN、peer 名称、公开端点，以及维护者签名私钥的路径。 agent 会在本地生成一个 WireGuard 密钥对并从 API 返回确切的 WG 和 BGP 配置参数。私钥始终不离开你的系统。

Example prompt:

Use $nyaw-dn42-autopeer to peer AS4242421234 with Nyaw.
Use peer name fra1 for this machine.
My endpoint is 198.51.100.1:51820, and my registered SSH key is ~/.ssh/id_ed25519.
Save the new WireGuard key pair under ./secrets/nyaw-peer/.

See documentation.

API Documentation

Automation tools must call POST /api/challenges before each peer change. A challenge cannot authorize a different operation or a second request.

自动化工具在每次更改 peer 之前，必须调用 POST /api/challenges。一个应答验证码不能用于授权不同的操作，也不能用于第二次请求。

Use these links to examine the request schemas and test the API:

使用这些链接来检查请求模式并测试 API：

OpenAPI Specification: The raw OpenAPI v3 JSON specification to integrate with your clients.

Backend repo

Manually

About My Network - 关于我的网络

Below provides the necessary information to establish a peering connection with the SECIRIAN-AS (AS4242420291) network within DN42.

以下提供了在 DN42 网络中与 SECIRIAN-AS (AS4242420291) 手动建立 Peering（对等连接）所需的必要信息。

Peering Requests

If you would like to manually peer with me, please reach out via email at dn42@nyaw.xyz, or contact me on Matrix at @sec:nyaw.xyz, more contact info could be found in info page. When requesting a peering, please provide your ASN, node endpoint address, and WireGuard public key.

如果您希望手动与我建立 Peering，请通过电子邮件联系 dn42@nyaw.xyz，或者通过 Matrix @sec:nyaw.xyz 联系我，其它联系方式可见博客信息页。在申请 Peering 时，请提供您的 ASN、节点端点地址以及 WireGuard 公钥。

Peering Requirements - Peering 要求

To peer with my network, you must meet the following baseline requirements:

You must have a valid DN42 ASN and your registry contact information must be up to date.
You must support IPv6 and Multiprotocol BGP (MP-BGP).
You should support extended next hop (RFC 8950).
You should implement Route Origin Authorisation (ROA) checks.

要与我的网络建立 Peering，您必须满足以下基准要求：

您必须拥有有效的 DN42 ASN，并且您的注册表联系信息必须保持最新。
您必须支持 IPv6 以及多协议 BGP (MP-BGP)。
建议您支持 extended next hop (RFC 8950).
建议您实施路由源授权 (ROA) 检查。

Supported Tunnel Types, BGP IPs & Port - 支持的隧道类型、BGP IP 与端口计算

Autopeer creates WireGuard tunnels and uses deterministic IPv6 link-local addresses for BGP.

Configure fe80::fcde:3243 as the Nyaw BGP neighbor address.
Configure your WireGuard interface with fe80::{(ASN >> 16)}:{(ASN & 0xffff)}.
e.g. for AS4242421234, address is fe80::fcde:35f2.

Autopeer also calculates the WireGuard listen port deterministically based on your ASN.

The preferred port is 20000 + (ASN % 10000).
e.g. for AS4242421234, the preferred port is 21234.

If the preferred port is already taken, it will increment the port number sequentially until an available one is found. The create response returns the final assigned IP addresses and port.

Autopeer 使用 WireGuard 隧道和确定性的 IPv6 链路本地地址建立 BGP 会话。

在 BGP 配置中将 fe80::fcde:3243 作为 Nyaw 邻居地址。
在你的 WireGuard 接口配置 fe80::{(ASN >> 16)}:{(ASN & 0xffff)}。
例如 AS4242421234 的地址为 fe80::fcde:35f2。

Autopeer 还会根据你的 ASN 确定性地计算 WireGuard 监听端口。

首选监听端口为 20000 + (ASN % 10000)。
例如 AS4242421234 的首选端口为 21234。

如果该首选端口已被占用，服务将依次递增寻找可用的端口。创建响应会返回最终分配的 IP 地址和端口。

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMDcYqby4TnhKV6xGyuZUtxOmTtXjKYp8r+uCxbGph65
sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIH+HwSzDbhJOIs8cMuUaCsvwqfla4GY6EuD1yGuNkX6QAAAADnNzaDoxNjg5NTQzMzc1
sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIKzRx/a3GL2GZCTo/xU54m5eaRruWYErCAXnttg+YJFzAAAADnNzaDoxNzg5MDg4ODQz