Skip to content

TransparentMirror

Jump to bottom
Jason Fesler edited this page Aug 5, 2021 · 23 revisions

As of August 2021, I am unable to add additional transparent mirrors. My work/life load is too high at the moment to take on additional mirrors. If you feel strongly that another transparent mirror is needed in your part of the world, you can still ask - but most of the world has great coverage now, outside of China.

I am looking for volunteers to take "test-ipv6.com" traffic on my behalf; in particular for users from their country (and, perhaps, neighboring countries). Or, if you're a large ISP, at least sending users from your ASN to your mirror. I ask, because the test-ipv6.com test is entirely based on how quick a user can fetch specific urls; and the locations of some of the users make the test less reliable. I'd like your users and your neighbors to have the most reliable information possible.

To do this, you set up your mirror as usual; only some extra ServerAlias lines to your Apache configuration, and then coordinate with me on what traffic you're willing to serve. I use the IP-to-geo-location data from MaxMind to identity DNS servers, and send clients to the best matching mirror possible.

To make this work, I will need ssh and root access to your mirror. I will manage SSL certificates covering both your mirror (in your domain name) plus also my domain name. At least once every 90 days I will ssh into your server, install new certificates, and restart the web server.

What I require when people visit 'test-ipv6.com' hosted by you:

  • Page remains unbranded, no banners/logos. Not mine, not yours.
  • Stats and comments go to my site.

What I offer:

  • Thanks to your company name and link at the bottom of the page for providing the mirror. For an example of what this looks like, visit http://comcast.test-ipv6.com.

While the riches and fame are elusive, this can still give you a way to provide to your region a valuable public service.

Example sites

What do I Do?

Thanks for asking!

First step - Apache

In your Apache VirtualHost configuration, add these lines:

	# By request for jfesler@test-ipv6.com
	ServerAlias test-ipv6.com
	ServerAlias *.test-ipv6.com
	ServerAlias testipv6.com
	ServerAlias *.testipv6.com
	ServerAlias test-ipv4.com
	ServerAlias *.test-ipv4.com
	ServerAlias testipv4.com
	ServerAlias *.testipv4.com
	ServerAlias test-ds.com
	ServerAlias *.test-ds.com
	ServerAlias testds.com
	ServerAlias *.testds.com
	ServerAlias test-v6.com
	ServerAlias *.test-v6.com
	ServerAlias testv6.com
	ServerAlias *.testv6.com

Restart your Apache web server; and make sure everything still works.

Second step - /site/config.js

Make sure that you /site/config.js has operator and link defined. I'll review this with you to make sure that it appears in a sane fashion. I want you to get credit for contributing :-). When called as test-ivp6.com, only operator and link will be honored.

Third step - Run the validator

Visit http://validator.test-ipv6.com (or http://port8000.validator.test-ipv6.com:8000 if you're stuck on IPv4). Run the validator test against your site. Be sure the "transparent" option (checkbox, next to the submit button) is selected; that will test your site while using the test-ipv6.com name.

Final step

Reach out to me - jfesler@test-ipv6.com - about becoming a transparent mirror. Share with me your mirror's current name; and what traffic you're willing to accept. If you're unsure about doing this, reach out anyways and ask me to look at the last few days of web lots - I can estimate what extra traffic you'll see. I can assure you it won't be high.

Create an account for me, with the following:

useradd jfesler
mkdir ~jfesler/.ssh
echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/KxX62JrP+6MJCkDKvwzlXHUxJiKk0llN/IHFUffNKB3DpSeJGznsU1ubZsOT82SkIWuIFALLME8QaN9JVgvYVKXio/EHbhl8ix+otWNRPzwY06Fh9qOZzjJ+y62bU97M5foECwremKtyWjoB6d93f1ufm6czSlE5efkmlTFmR7SpnAdz08ZaleOkmC5/scXcmrYaK2/psz6EODrOdIJZwQ7MMUXBDMZxbhNpy1d8TdMabLcDHf78SRFvqS5/mWWhIVHaMG+P6N82YkBFu2t7Gh/rYGRwube2VHz9GNE7g9c10jQ6DOvjQ6oAgkGop4NvVdF/4eHOOhNO7689QdJZ jfesler@zircon" | tee -a ~jfesler/.ssh/authorized_keys
chown jfesler ~jfesler/.ssh ~jfesler/authorized_keys
chmod go-rwx ~jfesler/.ssh ~jfesler/.ssh/authorized_keys

Enable sudo for my account.

For ISPs: if you want to restrict to a list of ASNs, I can work with that.

For non-ISPs: If you want to restrict to a single country, or permit nearby countries, I can respect that. For country decisions, permitting your country is simple. Neighboring countries will depend on how they connect to the Internet; and in particular, how well your two countries connect to each other. In some cases, it may be better to only serve your single country (parts of Asia, South America, Africa).

Countries I'm especially interested in:

  • CN (this one is tough! but would be quite valuable to residents inside China)
  • KR (Currently served via US)

Now live:

  • AU - test-ipv6.com.au, test-ipv6.monash.edu (Also serving NZ)
  • BR - test-ipv6.arauc.au
  • CA - test-ipv6.csclub.uwaterloo.ca
  • CH - test-ipv6.alpinedc.ch
  • GB - test-ipv6.noroutetohost.net
  • KE - test-ipv6.ke.liquidtelecom.net (serving BF, BI, CF, CG, CV, DJ, ER, ET, GA, GN, GQ, GW, KE, KM, MG, ML, MR, MU, NE, RW, SH, SL, SN, SO, ST, SZ, TD, TZ, UG, YT)
  • HK - test-ipv6.hkg.vr.org (Serving many parts of Asia)
  • HR - test-ipv6.carnet.hr
  • JP - test-ipv6.jp
  • NL - test-ipv6.ams.vr.org (Serving many parts of Europe, Africa)
  • RO - test-ipv6.roedu.net
  • LT - test-ipv6.cgates.lt (serving LT, RU)
  • SG - test-ipv6.sin.vr.org (Serving many parts of Asia)
  • US - test-ipv6.comcast.net (limited to Comcast for Comcast customers)
  • ZW - test-ipv6.zw.liquidtelecom.net (serving ZA, ZW, BW, ZM, LS, MW, NA, MZ)

User Traffic

This is from the week of Sep 15, 2016. Darker colors = more visitors.

Clone this wiki locally