r/i2p • • 1h ago

2.14.0 Release

• Upvotes

I2P 2.14.0 (API 0.9.71) was released on 2026-10-20. This release hardens security across the router and bundled apps, brings a large round of i2psnark improvements, and fixes streaming and tunnel reliability issues.

As usual, we recommend that you update to this release. The best way to maintain security and help the network is to run the latest release.

https://i2p.net/en/downloads/

Notes: Windows Easy Installer, Ubuntu repo, and Android will be released in the coming days.

Security

Router

  • AES operations and EdDSA signature comparison are now constant time (73819404c, 6440d5f16)
  • Fixed an out-of-bounds read in garlic clove parsing and an undersized NTCP2 message 3 buffer (67b2f7327, db3cd60f1)
  • Tunnels drop duplicate fragments and cap the fragment reassembly map (8af94b9e4, 4c3d10c12)
  • Smaller robustness fixes in NetDB, NTCP, and datagram handling

i2ptunnel

  • HTTP proxy blocks requests to private, loopback, and link-local IPv4 addresses (3aef97a9d)
  • Fixed SOCKS 4/4a downgrade bypass of proxy authentication (ff63e0cdf)
  • HTTP server tunnels strip CR from headers; proxy auth strings are no longer logged
  • Output escaping fixes throughout the Hidden Services Manager

i2pcontrol

  • CSRF token protection, JSON security headers, and a delay on failed auth (9a1c56f35, e79e4949d, 8fbfb70fb)
  • Removed fallback to the default itoopie password

i2psnark and Addressbook

  • Hardened bencode parsing (recursion limit, duplicate key rejection) and path traversal checks
  • Addressbook checks for destination mismatch on update (a884b9093)

i2psnark

  • Magnet links: all trackers are now used and saved, plus dn name and xl size parameter support
  • Trackers and DHT: UDP backup tracker, smarter announce timing, spec-compliant dictionary sorting, compressed UDP and DHT messages
  • Performance: lower memory use and faster hashing when creating or rechecking torrents; tuned request throttling, pipelining, and timeouts
  • UI: free disk space shown and checked when adding torrents, audio playlist controls, live updates resume when the tab is visible again
  • Fixes: file priorities no longer lost after the startup check (GH #170), metainfo attribute extraction, extension handshake NPE
  • Groundwork for BitTorrent v2 (not yet user-facing)

Streaming and Transport

  • Streaming synchronization fixes in the retransmit and ack paths, plus slow start and reset tuning (061d4e3f6)
  • Tunnels periodically use 5-slot tunnel build messages
  • New explicit force-IPv6 option, with Docker bridge support in progress
  • SAM: fixed DG2/DG3 subsessions (d2392ae9b)
  • I2CP: new discardMessage() session API

Other

  • SusiDNS: new "conflicts" address book
  • Reseed: added reseed2.i2pgit.org, reseed.kiota.ch, two skhron.eu servers, and i2p.ntp.poweredbyberlin.de; removed reseed.i2pgit.org
  • Docker: Debian Trixie, OpenJDK 21, Ant 1.10.18, commit SHA stamped in builds
  • Build fixes for izPack 5.2.6, gettext 1.0, and Gradle
  • GeoIP, Tor blocklist, tracker list, and translation updates

Full changelog: i2p-2.13.0...i2p-2.14.0

Thanks to zzz, eyedeekay, Nicholas Lopez, and fa.


r/i2p • • 11h ago

Help Postman tracker not working

3 Upvotes

I don't know but I can't access it since I updated to 3.0 i2pd.


r/i2p • • 14h ago

Help are the eepsites actually interesting?

17 Upvotes

I kind of miss the old internet and did some browsing in Neocities but it still didn't feel right.

Many people say i2p feels a bit like the old internet but I just wanted to know if the eepsites were genuinely worth looking around or if they were just like idk boring "dark web", sensationalist, wannabe-hacker kind of stuff or more creative/geeky projects analogous to those of the early days.


r/i2p • • 1d ago

News I2PD 3.0.0 comes with built-in torrenting support and its speed feels unreal

Post image
86 Upvotes
[torrents]
type = torrents
torrentsdir = /var/lib/i2pd/torrents
keys = torrents-keys.dat
trackers = http://atia.i2p/announce,udp://opentracker.dg2.i2p:6969,udp://tracker.insulaocculta.i2p:6969,http://opentracker.skank.i2p/a
signaturetype = 7
dht = true
dhtfile = torrents.dht
web = true
rpcport = 7657
rpcpath = torrents
rpcaddress = 127.0.0.1
rpcauth = false

write this to /etc/i2pd/tunnels.conf

or appdata/roaming/i2pd/tunnels.conf for windows

restart your router then enter

127.0.0.1:7657/torrents/web/index.html

optional:

rpcauth = true
rpcuser = admin
rpcpass = secret

update your i2pd to version 3.0.0 and see it yourself :)


r/i2p • • 4d ago

Announcement Building an autonomous, air-gapped agent loop (DeepSeek-R1 CoT + Local Sandbox Verification) – Looking for collaborators / peers

Thumbnail
0 Upvotes

Hey everyone,
I’m currently setting up a localized, fully air-gapped multi-agent architecture inspired by the recent advances in open reasoning models. The core concept relies on a closed-loop system:
The Brain: A local reasoning model (DeepSeek-R1 distilled variants, 32B/70B) utilizing heavy Chain-of-Thought (System 2) to plan and write system-level code.
The Executor: A smaller, high-throughput model (like Hermes/Llama-3) that deploys, tests, and runs these scripts within an isolated local Linux sandbox.
The Loop: Automatic log capture, error parsing, and recursive self-correction (Rejection Sampling / local GRPO fine-tuning via Unsloth) to achieve recursive software optimization without calling external, centralized APIs.
The ultimate long-term goal is to transition this from a single-node setup into a highly resilient, decentralized P2P topology (a mesh network of independent local nodes cooperating over encrypted channels).
I’m looking for like-minded developers, systems engineers, and AI researchers who are passionate about absolute data sovereignty, local agentic loops, and decentralized infrastructures.

If you are working on something similar, experimenting with automated local fine-tuning loops, or interested in the architecture of decentralized AI mesh networks, let’s connect. Drop a comment or send a DM to sync up.
Stay local. Stay sovereign.


r/i2p • • 5d ago

Discussion Starlink and I2P

Thumbnail
10 Upvotes

r/i2p • • 8d ago

Announcement Direct Connect over I2P, made easy to set up and use. Ready for testing now.

17 Upvotes

Windows installer and portable ZIP with I2P built in. No separate I2P setup or port forwarding. Linux terminal client and hub/server also available.

Start the client, give I2P a few minutes, then select File → Connect to I2P hub:
Or just press the star.

adc://mrjdpwyvlr23hoqpd3xbkgf4z7gdmwsbug7qm4fjkwd4dnsx4noq.b32.i2p

No registration or password.

Audio only test hub.

Edit:

The protable version work in Sandboxie and no need to share any files.


r/i2p • • 10d ago

Educational Jpeg-xl progressive decoding demonstration on a i2p eepsite

29 Upvotes

https://reddit.com/link/1x395tv/video/a85qpld8iuuh1/player

photo is 1.2 MB and it loaded in 5 sec (approx 250-350 kb/sec)

browser used: Firefox 157

http://eurabsp7voheencjnumtkmgyoyccuyagojjrvd64mlujoyxzxuoq.b32.i2p/

use this website to test it


r/i2p • • 11d ago

Plugin/Application Ios i2pd client

12 Upvotes

I’ve been working on an iPhone app that embeds the C++ i2pd router. It has a built-in .i2p browser, the i2pd web console, router diagnostics, an address book, and a safe shutdown Live Activity timer in dynamic island.

The project targets iOS 17 and later. The source code and an unsigned IPA are available. To install the IPA, you’ll need to sign it with your own valid certificate.

This is a prototype. The background restriction bypass is experimental, and iOS may still suspend or terminate the router. I haven’t verified it on real iPhone but on simulator of iPhone 18 pro with ios 27 it works.

https://github.com/SoItsTime/I2PdiOS


r/i2p • • 11d ago

Help VPS Hosting

4 Upvotes

Is there a VPS Hoster directly available in the i2p network for hosting eepsites?


r/i2p • • 13d ago

Help Kill switch for built-in torrent client necessary?

1 Upvotes

Hi all,

Very interesting project.

Can someone tell me if the built-in torrent client can accidentally use the clearnet so it's better to have a kill switch in place if something breaks or does the built-in client only works over i2p?

Thanks


r/i2p • • 16d ago

Update for release 2.14.0

32 Upvotes

Due to circumstances beyond my control, my ability to communicate about release has been severely limited this quarter. However, work is progressing essentially on schedule, major changes are in, bugs are being fixed, and release will happen on October 20th as planned last month.

Thanks for your patience, Idk


r/i2p • • 16d ago

Help jetty won't start on i2peasy

2 Upvotes

Using 2.13.0-0-win(on win7), it reads jetty.xml on the same folder which i2p.exe exist.
//I installed program on custom folder.
//I copy back config on appdata\Local\i2peasy but it still don't use this folder.

and copy config/eepsite to upper folder still not work. It don't show red logs anymore but jetty still don't start. (because the flag icon on tunnels don't show)


r/i2p • • 17d ago

Help tunnels config files

0 Upvotes

If I have tunnels configured in both /var/lib/i2pd/ and in /etc/i2pd/ which takes precedent? They are different and there is overlap in only one entry - for port 4448. i2pd console does not show this many tunels though - can it be that both are getting read?


r/i2p • • 21d ago

Discussion forward your ports.

Post image
65 Upvotes

I2P is a Peer 2 peer network It needs people like you to work. If you dont enable port forwarding you cant properly contribute to I2P because users can’t connect to you directly. If you forward your ports I2P will become a faster and lower latency network.

If you can’t forward ports because youre behind CGNAT contact your internet provider and try to get IPv6. Even that alone would be a big contribution to I2P.

If that isnt possible too get a VPN that supports port forwarding (thats what i did)

sharing is caring.


r/i2p • • 22d ago

Discussion Connecting to a remote router

9 Upvotes

I was in a workshop where we played with i2p and it seems the traditional way to use i2p is to run a router on localhost, and have your app use the router via the SAM protocol.

Running the router adds a lot of friction, especially on mobile. I realized that we can just connect to a remote, possibly shared router.

What are the trade-offs here? Can I simply share my router with friends?


r/i2p • • 24d ago

Help ou shi

Post image
0 Upvotes

r/i2p • • 25d ago

Security Before realizing privacy issues

0 Upvotes

I want to ask everyone, before touching i2p and other privacy projects or realizing changes to my own privacy issues, has my privacy already been leaked?


r/i2p • • 26d ago

Help wiki in I2P ?

9 Upvotes

Hello, I've just discovered I2P and after using it a bit, I wanted to know if, like on Tor, there are wikis that list websites


r/i2p • • 26d ago

Guide/Tutorial Instruction how to create secret tunnel inside I2P network

18 Upvotes

My old post here https://www.reddit.com/r/i2p/comments/1pxv52a/instruction_how_to_create_secret_tunnel_inside/ was deleted by reddit as well as my other posts on Reddit and more important my own subreddit too. By the way I try to restore knowledge for all our community reposting from my logs. If something happens again with this post, feel free to post this instruction by yourself, I don't need glory or anything like this keeping this text under my name.

Here is the instruction how to create SECRET tunnel between computers, computer and phone, phone and phone.

I didn't find posts about this topic here. This instruction will explain how to create secret i2p tunnel between server(computer with Linux) and client(Android phone) for all people and for myself so I can access to it from anywhere in case I have new phone/laptop or purged all data on it for crossing the state borders.

Firstly, you need to have binaries on server from there github.com/PurpleI2P/i2pd-tools/ You can build them and save. And for sure you should have already installed i2pd on your computer and phone.

Let's start create a secret tunnel:

  1. Now we generate file of secret tunnel for server(computer with Linux):

./keygen yourserver.dat 11

  1. Copy this file to i2pd folder on server(computer with Linux):

sudo cp yourserver.dat /var/lib/i2pd/

  1. Now we should find destination address for client(Android phone) config:

./keyinfo -b yourserver.dat (we should save address in the string which starts "b33 address:" for step 6)

  1. Now we should find public and private keys for server and client configs:

./x25519 (save both strings, we will need them later in step 5 and 6)

  1. Now we create config for server(computer with Linux) in tunnels.conf file located in /etc/i2pd/tunnels.conf

[anynameforserverconfig]

type = server

host = 127.0.0.1

port = 22 (for example we create a secret i2p tunnel for ssh service, so we chose port 22)

inport = 22666 (can be any number, just remember to use the same number in client config too)

inbound.length = 1 (1 for faster speed, for more anonymous traffic choose 2,3, etc)

outbound.length = 1 (1 for faster speed, for more anonymous traffic choose 2,3, etc)

inbound.quantity = 4

outbound.quantity = 4

inbound.backupQuantity = 2 (reduce traffic when inactive)

outbound.backupQuantity = 2 (reduce traffic when inactive)

i2cp.reduceOnIdle = true

keys = yourserver.dat

signaturetype = 11

i2cp.leaseSetType = 5

i2cp.leaseSetAuthType = 1

i2cp.leaseSetClient.dh.001 = anyname:publickey (insert here public key from step 4)

  1. Now we create config for client(Android phone) in file which should be copied to /sdcard/i2pd/tunnels.conf on Android phone:

[anynameforclientconfig]

type = client

host = 127.0.0.1

port = 22666 (same number as in server config, so your ssh client should use port 22666 for connection)

inbound.length = 1 (1 for faster speed, for more anonymous traffic choose 2,3, etc)

outbound.length = 1 (1 for faster speed, for more anonymous traffic choose 2,3, etc)

inbound.quantity = 4

outbound.quantity = 4

inbound.backupQuantity = 2 (reduce traffic when inactive)

outbound.backupQuantity = 2 (reduce traffic when inactive)

i2cp.dontPublishLeaseSet = true

destination = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.b32.i2p (insert address saved from step 3)

keys = yourclient.dat

i2cp.leaseSetPrivKey = privatekey (insert here private key from step 4)

  1. Now restart i2pd on server(computer with Linux), wait for 5-10 minutes, restart i2pd on client(Android phone). All should work now.

r/i2p • • Sep 21 '26

Announcement i2pbox v2.1 has been released, adding new features b33offlinekeys

Thumbnail
github.com
11 Upvotes

Signing the outer layer of an encrypted LeaseSet needs a key blinded from the destination's signing key for each day, which offlinekeys cannot produce. b33offlinekeys derives that material offline, once per day of the batch, and appends it to a normal offline-signed key file. The router gets a file it can publish with for the whole batch, and the destination's signing key never leaves the offline machine.


r/i2p • • Sep 19 '26

Plugin/Application Has anyone tried running DC++ over I2P? Is this a bad idea?

10 Upvotes

I’m curious if anyone here has ever tested a DC++ client and hub entirely over I2P.

I’ve started working on a fork of existing DC++ client and hub projects with the goal of making them I2P-only. The idea is to block normal clearnet connections completely and make setup as simple as possible.

Before I spend too much time on it, I’d like to know if anyone thinks this is actually useful or if there are technical reasons why DC++ is a poor fit for I2P.

EDIT

AirDC++ and Luadch are communicating over real I2P through SAM, with separate i2pd instances on each node. Hub connections work, chat works, search works, file lists work both ways, and real file transfers work in both directions.

I’ve also tested larger ISO transfers and verified the files with SHA-256 afterwards.

The Windows client is currently keeping its DC traffic on loopback and letting i2pd handle the actual external traffic. I’ve tested things like killing i2pd in the middle of a transfer and trying normal clearnet hub addresses, and so far the client has failed closed instead of falling back to normal TCP/UDP.

There’s still work left: a few more fail-closed tests, hostile/malformed peer data testing, GUI cleanup, packaging, and a proper security review of the I2P-specific changes.

The final goal is basically: install it, start it, connect to an I2P DC hub. No port forwarding, UPnP, SOCKS or manual I2P setup.

Estimated time to a decent public PoC on github: around 3 weeks.


r/i2p • • Sep 19 '26

Help having difficulties with new distro install getting i2p to work (server not found)

0 Upvotes

for unrelated reasons, I switched to a distro based on debian 13, and I immediately couldn't install the repository required to do the debian install in the documentation like I could in the other distro (devuan 6), so I went ahead and installed from the jar file, and now I can't connect to any eepsites whatsoever. Librewolf displays "server not found" upon attempting to access any eepsite, and so does firefox. I believe my ports are set up right since I sure didn't touch anything since installing i2p, and the router has been running for at least 45 minutes, though it took far less time in previous installations.

I will say that I am in fact firewalled, however my firewall of choice (OpenSnitch) isn't blocking anything right now. Should be noted that it still says I'm firewalled.

Any help would be greatly appreciated


r/i2p • • Sep 17 '26

Discussion If AI goes rogue on the internet, would I2P sites be affected?

0 Upvotes

What I mean about AI has more to do with AI being contained to a sandbox that can someone hack into other parts of the internet through various small cracks and I wonder if I2P is entirely separate from the normal internet where it's immune to such problems.


r/i2p • • Sep 16 '26

News i spent one year in prison with no internet access, was I2Pd(I2P for Android) messenger built withing this period of time?

6 Upvotes

i spent one year in prison with no internet access, was I2Pd(I2P for Android) messenger built withing this period of time?