This repository is experimental, and all APIs are subject to change.

Current goals:

• Security of layers 2-7 as a top priority, through picking good standards.
• Layer 2: BATMAN running over 802.11s, encrypted with WPA3-SAE, with 802.11w management frame protection
• Layer 3: Nebula VPN, based on the Noise protocol
• Layer 7: Nix binary cache using Nix Cache Proxy Server (Go)
• Tests simulating the entire hardware stack, including 802.11s wifi, the TPM used in key negotiation, and nodes that already have cached data.

Current non-goals:

• Being a router, including running DNS and NTP servers. Any router API this project has would likely be worse UX than just using OpenWRT.
  • My routers are configured in a way that works for me(tm) and I really don't want to inflict it on anyone else.
• Remote builders and user support, though this may change.
• Hardware-specific quirks, like setting up modems and customizing wifi chipset firmware.