Yggdrasil on Ubuntu 24.04 LTS

Azure Networking

Yggdrasil, an end to end encrypted IPv6 mesh router that gives every node a stable cryptographic address and self arranges an encrypted overlay between your peers.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Yggdrasil is an open source, end to end encrypted IPv6 mesh network. It is decentralized and self arranging: every node derives a permanent cryptographic IPv6 address in the 0200::/7 range from its own key, and nodes automatically build a spanning tree between their peers so any node can reach any other over the encrypted overlay, with no central server and no address plan to design. The result is a flat private IPv6 network that follows your machines across NAT, changing addresses and different clouds, so services keep the same address wherever they run. Node state is a single flat configuration file with no database and no web console; the node is administered with a command line tool over a local only admin socket.

Why the cloudimg image

The cloudimg image is hardened and fully patched with Yggdrasil preconfigured and running as a systemd service. It ships secure by default with no known key: first boot generates a unique node key for this instance alone, records the node's overlay IPv6 address, subnet and public key to a root only file, and binds the admin API to a local unix socket so it is never network reachable. Only the encrypted peering port and SSH are exposed, and every instance is backed by a paired deploy guide and 24/7 cloudimg support.

Common uses

  • An end to end encrypted IPv6 overlay across clouds and sites
  • Stable cryptographic addressing that survives NAT and IP changes
  • A decentralized mesh network with no central server