Yggdrasil Endpoints

This section is for those who want to access the Hoppy interface from either our Private Yggdrasil Relay or the Public Yggdrasil Network. This has been tested on Linux only.

This is an advanced configuration designed to allow those behind restrictive firewalls - e.g. at the ISP level - to still access Hoppy Network. The throughput of this connection is usually slower than a direct WireGuard connection.

TIP

Using both the Private Yggdrasil Relay and a peer from the Public Yggdrasil Network in the same setup may result in your devices being seen on the Public Yggdrasil Network. Make sure you understand Yggdrasil behavior (e.g. multicast) before trying this.

Configure Yggdrasil

Connecting from the Private Yggdrasil Relay

The Private Yggdrasil Relay provided by Hoppy uses TLS over port 443, which looks very similar to HTTPS traffic. This should be able to bypass most firewalls. Add the peer to InterfacePeers for each of the device's physical interfaces - otherwise the wrong interface may be chosen. Then, start the Yggdrasil service.

Connecting from the Public Yggdrasil Network

Choose one or more peers from: https://publicpeers.neilalexander.dev/ that are accessible, with consideration to protocol and geographical location. Add the peer to InterfacePeers for each of the device's physical interfaces - otherwise the wrong interface may be chosen. Then, start the Yggdrasil service.

Next Steps

1. On the Modify Subscription page for your interface, click the '.conf Template' button at the bottom (next to 'Clear Private Key').

2. In the configuration template, find and copy the 'Public Yggdrasil Endpoint' or the 'Private Yggdrasil Endpoint', this must match the network chosen above.

3. Replace the endpoint in your client configuration with the desired endpoint.

4. Set the MTU of the WireGuard tunnel to 1280.

5. Finally start the WireGuard Interface.