@decentnetwork/lan 0.1.27 → 0.1.28

package/dist/daemon/server.js

@@ -218,9 +218,29 @@ export class DaemonServer {
             // 6. Optional dora (DHCP-style) registration. When enabled and the
             // server is reachable, dora hands us a virtual IP and tells us
             // who else is on the network — eliminating the manual ipam.yaml
-            // sync between operators. On any failure we fall through to the
-            // IP already loaded from config + ipam.yaml.
+            // sync between operators.
+            //
+            // Fallback policy when dora is unreachable: DON'T use
+            // config.network.ip blindly. `agentnet init` defaults every
+            // fresh install to 10.86.1.10, so two new peers that can't
+            // reach dora will BOTH claim the same fallback and silently
+            // collide — symptom seen in the wild as packets going to the
+            // wrong daemon and 100% loss to legitimate peers. Use the
+            // deterministic-from-userid IP instead (sha256(userid) → last
+            // two octets of 10.86.X.Y). That guarantees every peer gets a
+            // unique IP keyed off identity, with no shared default to
+            // collide on. If dora comes up later, the
+            // onAllocatedIpChanged callback swaps the TUN to dora's value.
             let tunIp = this.config.network.ip;
+            const ownUserid = this.peerManager.getPubkey();
+            const deterministicFallback = Ipam.deterministicIpForUserid(ownUserid);
+            if (tunIp === "10.86.1.10" || !tunIp) {
+                // The init-default fallback IP — every fresh decentlan installs with
+                // this. Override with a per-identity deterministic value before
+                // dora even gets to try.
+                tunIp = deterministicFallback;
+                this.logger.info(`Using deterministic fallback IP ${tunIp} (derived from userid; avoids the 10.86.1.10 init-default collision)`);
+            }
             if (this.config.dora?.enabled && (this.config.dora.userids?.length ?? 0) > 0) {
                 // Need to be on the Carrier network before dora can talk to its
                 // server. Wait synchronously here — without joinNetwork the
@@ -234,7 +254,11 @@ export class DaemonServer {
                     peerManager: this.peerManager,
                     ipam: this.ipam,
                     nodeName: this.config.node.name,
-                    preferredIp: this.config.network.ip,
+                    // Hand dora our deterministic fallback as the requestedIp so
+                    // a successful register returns the same IP across restarts
+                    // (avoids the dora-stole-someone-else's-IP race that bit us
+                    // when ubuntu was momentarily offline during reallocation).
+                    preferredIp: tunIp,
                     // Fires when dora's background retry eventually succeeds
                     // AFTER the initial bootstrap already returned the fallback
                     // IP. At that point the TUN is up on the fallback (e.g.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.27",
+  "version": "0.1.28",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",