RingtailedFox's Guide on How To Install CJDNS on OpenWRT

RingtailedFox's Guide on How to configure CJDNS on OpenWRT 23.x and above:

Tested on a Netgear R7800 / IPQ806x / ARM Cortex A15 Neon VFPV4 / ARMv7!  Contact the author at <slycooper1986@yahoo.ca> for assistance with other architectures!

Step 1: DO NOT USE THE OPENWRT .ipk FILE!  IT SEGFAULTS!  And since luci-app-cjdns requires that, it's mostly useless too!

Step 2:  grab https://dl-cdn.alpinelinux.org/alpine/latest-stable/community/armv7/cjdns-22-r4.apk instead!!!

Step 3: Extract on your computer.

Step 4: open the extracted folder and navigate to ./usr/sbin/ in the extracted folder.  You should see files like cjdroute and testcjdroute, among others.  Upload cjdroute to /usr/sbin/ in your OpenWRT router.

Step 4a: I'd recommend symlinking /usr/bin/cjdroute to /usr/sbin/cjdroute so it's in your path.

Step 5:  Open up your favourite SSH program (like Putty) and access /etc/.  From there, run /usr/sbin/cjdroute --genconf > /etc/cjdroute.conf so you end up with /etc/cjdroute.conf

Step 6: Open /etc/cjdroute.conf in a text editor and scroll down to the following section ending at line 102:

                // Nodes to connect to (IPv4 only).
                "connectTo": {
                    // Add connection credentials here to join the network
                    // If you have several, don't forget the separating commas
                    // They should look like:
                    // "ipv4 address:port": {
                    //     "login": "(optional) name your peer has for you"
                    //     "password": "password to connect with",
                    //     "publicKey": "remote node key.k",
                    //     "peerName": "(optional) human-readable name for peer"
                    // },
                    // Ask somebody who is already connected.


Step 7: Add these following lines:

    "170.75.163.51:9202": {
    "login": "public",
    "password" : "public",
    "publicKey": "2v6dt6f841hzhq2wsqwt263w2dswkt6fz82vcyxqptk88mtp8y50.k",
    "notes" : "vps.cjdns.ca ircerr 100mb 2TB lunanode"
},
    "170.75.162.17:9202": {
    "login": "public",
    "password" : "public",
    "publicKey": "tcbvl7zf6d8127d1phgq1t01jqdtug7qwmfcg97lcstt22ct7jg0.k",
    "notes" : "vps.ircerr.ca ircerr 100mb 2TB lunanode"
},
    "145.239.86.218:49480": {
    "login": "public",
    "password": "zczihnhzwferfjjwviwvqtuv",
    "peerName": "akn01",
    "publicKey": "vgfb790mldbdzjlf4kkgqd4ux6r9zqv8b4k7ljds4dh7gpvgjx30.k"
},
  "95.216.159.63:12786": {
    "login": "default-login",
    "password": "l0fgl9qkujmw6rh22w6knbwcc7x4t64",
    "publicKey": "ppxv6z0dunqsnv9n4qnw9vjzg1yr2w82hxhk6mx82vlkcc7vmhg0.k",
    "peerName": "akn02"
},
  "51.195.222.58:34056": {
    "login": "public",
    "password": "jwgvrfnpgsidbubsdfyxdgys",
    "peerName": "akn03",
    "publicKey": "bbpvzftn4plvhjtrct2uq39x9t0j13mfgn4fvtx5fmktprur02c0.k"
 }


Step 8:  Check to make sure they are directly above this section:



                }
            },
            {
                // Bind to this port.
                "bind": "[::]:24619",
                // Set the DSCP value for Qos. Default is 0.
                // "dscp": 46,

Step 9:  attempt to run /usr/sbin/cjdroute < /etc/cjdroute.conf via SSH.

If all is well, you should see a line at the end saying "Cjdns started in the background".


Step 10: Open up LuCI on your router in your web browser and go to

Network -> Interfaces.

Step 11:  Click [Add new interface] towards the bottom.  A new interface window will pop up.  This new interface will be an Unmanaged Protocol.  its Device will be "tun0".  You can name it whatever you'd like, such as "cjdns".  After this, click [Create interface].

Step 12: click on "Firewall Settings" tab within that interface configuration window.  Create a new zone labelled CJDNS., then click [Save].  On the main Interfaces page, click [Save & Apply] to immediately apply these changes.

Step 13: Edit the CJDNS interface but this time, go to Firewall Settings and Add it to your WAN firewall-zone.  Then, click [Save].  On the main Interfaces page, click [Save & Apply] to immediately apply these changes.

Step 14: go to Network -> Firewall then select NAT Rules.  Click on [Add].

Step 15:  Type in the following:

Name: CJDNS (or whatever you want to call this)
Restrict to address family: IPv6 only
Protocol: Any
Outbuond Zone: Any
Source Address: any
Destination address: Scroll down to where you see a text box with -- custom -- in it.  Click that and write fc00::/8
Action: MASQUERADE



Step 16: Click on the Advanced Settings tab to make sure Outbound Device says "tun0".  Then click [Save & Apply].  If you see the page complaining about invalid fields, don't worry. this should be fine.  It's just whining that you're masquerading an internet address range to a LAN address range.  So as said before, when you're ready, click [Save & Apply].

Step 17: Check in Netework -> Firewall Zone Settings that you have the following:
LAN -> WAN (Input: Accept, Output: Accept, Forward: Accept, Masquerading un-checked)
WAN -> Reject (Input: Reject, Output: Accept, Forward: Reject, Masquerading is CHECKED)
CJDNS -> Reject (Input: Accept, Output: Accept, Forward: Reject, Masquerading is un-checked)
You may have additional interfaces configured in additon, but these are the ones you want to look for.

Step 18: back in SSH, go to /etc/ and type this command to restart DNSMasq and cjdroute, and have cjdroute pull its configuration from /etc/cjdroute.conf:

 /etc/init.d/dnsmasq restart && killall cjdroute && /usr/sbin/cjdroute < /etc/cjdroute.conf

Step 19: attempt to ping or curl a website from both  your router and your downstream machines (laptop, desktop, whatever) via this command in SSH/Command Prompt/Terminal:

curl "http://[fc59:6076:6299:6776:c13d:fbb2:1226:ead0]/" --noproxy fc59:6076:6299:6776:c13d:fbb2:1226:ead0

Just remember that after each reset, you'll have to run /usr/sbin/cjdroute < /etc/cjdroute.conf  or... you could add that line to /etc/rc.local on a seperate line ABOVE/BEFORE "exit 0" so that file looks something like:


# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.

/usr/bin/cjdroute < /etc/cjdroute.conf

exit 0

Now it should auto-start with your system right after initialization and network handshakes have completed!



Step 20: I dunno... celebrate or something?  It took me and the guys at #cjdns on EFNet IRC several months to figure this stuff out!