carrierwrt/carrierwrt — pull request #1 by anyfinetworks (2013-05-21 17:41:07+00:00)
Title: Anyfi.net integration

[Anyfi.net](http://anyfi.net) is a software extension that makes every Wi-Fi network available from every access point. The user experience is completely seamless; if you have previously connected to a Wi-Fi network locally your device will automatically connect to the same network remotely whenever you come within range of another [Anyfi.net](http://anyfi.net) enabled access point.

The software consists of two user space daemons; the [radio front-end](http://anyfi.net/documentation#a_frontend) daemon **anyfid** and the [tunnel termination back-end](http://anyfi.net/documentation#a_backend) daemon **myfid**. They communicate with each other and a [mobility control server](http://anyfi.net/documentation#a_matchmaker) to orchestrate the seamless user experience.

Key features/properties:

* You don't need to install any software on the device; all the magic is on the access point side. From the device point of view it's all standard Wi-Fi.

* There is no manual registration step. When you connect your device to your home Wi-Fi network it's automatically registered for remote access to that network.

* Mobile devices "see" their favorite networks, connect automatically and authenticate using the same Wi-Fi security mechanism and credentials that where previously used to authenticate locally. This is [what makes authentication completely seamless](http://anyfi.net/documentation#a_how_it_all_fits_together).

* The Wi-Fi protocol is [tunneled over IP](http://anyfi.net/documentation#a_data_plane) from the visited access point to the home access point. This means that the encryption keys are derived only in the mobile device and in a trusted location, ensuring end-to-end security even if an attacker is in control of the visited access point. You can think of it as an automatic Wi-Fi based VPN of sorts.

* Since mobile devices connect to their home networks through a [Wi-Fi over IP tunnel](http://anyfi.net/documentation#a_data_plane) they are assigned IP addresses by the home network. This ensures seamless hand-over between visited access points and full traffic traceability: you will not be blamed for something a "guest" has done.

* Only the MAC address of your device, the IP address of your access point and information that's generally available in a beacon (SSID and similar) are ever sent to the server or a visited access point. No personally identifiable information, and absolutely no authentication credentials!

* It works both for home Wi-Fi and corporate WLANs with EAP/RADIUS authentication. The same software can also be used for [carrier Wi-Fi applications](http://www.anyfinetworks.com/solutions) such as [secure mobile offload with authentication against a SIM card](http://www.anyfinetworks.com/solutions/mobile), by simply configuring a custom [mobility control server](http://anyfi.net/documentation#a_matchmaker).

For a walkthrough of the integration please see http://anyfi.net/integration.