Habr•July 26, 2026•🇷🇺Translated from Russian

Meshtastic Gains Renewed Popularity as Offline LoRa Mesh Networks Expand for Remote and Disaster Communications

Meshtastic is experiencing a notable renaissance as interest grows in reliable communication networks that function without internet access. Originally developed in 2020, the LoRa-based protocol enables long-range mesh networking suitable for cities, disaster zones, hiking expeditions, and search-and-rescue missions.

Recent global internet disruptions have accelerated adoption, prompting users to seek resilient offline alternatives. New ready-to-use devices such as the Hacker Pager and Heltec V3 terminals, along with numerous DIY tutorials, have made the technology more accessible, including in regions of Russia where mobile coverage remains limited.

Two primary categories of Meshtastic devices exist. Stationary nodes installed on rooftops and elevated locations provide core network infrastructure, while mobile nodes function as portable radio modems that users carry or mount on vehicles. These mobile units connect to smartphones via Bluetooth and deliver an SMS-like messaging interface through official Meshtastic applications for Android and iOS.

The Hacker Pager stands out for its dual capability: it operates autonomously with its own interface yet also serves as a Bluetooth gateway for smartphones. This flexibility supports both independent use in remote areas and integration with mobile devices.

Practical projects illustrate the technology’s versatility. One enthusiast built a remote shed alarm by pairing an infrared beam sensor with a Heltec ESP32 LoRa module that publishes alerts over the mesh network. A second module connected to home Wi-Fi forwards these messages to Home Assistant using MQTT after switching to the RadioLib library for reliable signal handling.

Additional deployments include expeditions by the Mars Society, which employs T-Echo radios for astronaut training in areas without cellular or Wi-Fi service. Similar use cases encompass long-distance hiking, natural disaster response, and regions experiencing internet blackouts, with some municipalities evaluating Meshtastic as emergency backup infrastructure.

Although the DIY nature of early setups required selecting boards, 3D-printing enclosures, and configuring firmware, newer commercial products such as the T5 E-Paper S3 Pro priced at $84 now offer pre-assembled solutions with e-paper displays, reducing entry barriers for broader adoption.

Related articles

Habr•Other

How to Prepare Your Website for Data Center Outages: Business Resilience Checklist

Following strikes on Yandex data centers, many businesses discovered that their sites and all backups were stored in a single location, leading to complete outages. The article provides a detailed checklist to mitigate such risks by separating critical components across different providers. Key recommendations include moving DNS to an independent provider, lowering TTL values, maintaining a live mirror site on separate hosting, and isolating corporate email. Additional steps cover local backups, monitoring, access management, and CDN usage. The guidance differentiates between virtual hosting, VPS or dedicated servers, and website builders like Tilda, while emphasizing compliance with Russian data localization laws such as 152-FZ.

Securitylab•Other

How to Properly Compare CDNs: TTFB, p95 Latency, Caching, DDoS Protection and True Pricing

Selecting a CDN based solely on the number of points of presence is as unreliable as choosing a car by dashboard buttons. Networks with dozens of global PoPs may underperform for audiences concentrated in Novosibirsk or Yekaterinburg, while smaller regional providers often deliver superior peering with Russian operators. The article evaluates CDNVideo, EdgeCenter, Curator, NGENIX and Yandex Cloud CDN across verifiable features, network design, caching behavior, security controls, operations and commercial models. Performance data is separated because marketing claims cannot substitute for independent measurements from services such as CDNMON. Emphasis is placed on p95 metrics, cache hit ratios, origin shielding, raw logs and API limits rather than marketing scores. The analysis shows that no single universal ranking exists; optimal choice depends on traffic profile, audience geography, security requirements and operational workflows.

Habr•Other

Innostage Lab Benchmarks PT NGFW 1.10.3 Performance in Eight Load Scenarios

Innostage researchers conducted extensive performance testing of PT NGFW version 1.10.3, the certified release at the time of trials. The evaluation covered TCP connection setup rates, concurrent session capacity, and throughput on a custom EMIX traffic profile with varying security modules enabled. Tests used Cisco TRex generators and a high-rule-count policy of 100,000 entries to simulate realistic enterprise conditions. Results showed the device sustaining 700,000 CPS and 6.4 million concurrent connections, matching or approaching vendor claims under HA-cluster configuration. Throughput remained above 27 Gbps even with IPS, application control, antivirus, NAT, URL filtering, and logging active. The report highlights differences in test methodology compared with vendor figures, including packet sizes and clustering setup.

Habr•Other

Java Card Tutorial: Implementing Supplementary Security Domain to Limit ISD Privileges

A detailed technical guide demonstrates how to create a Supplementary Security Domain (SSD) on Java Card platforms to isolate applet management from the Issuer Security Domain (ISD). The approach prevents full card compromise if ISD keys are exposed by restricting SSD privileges to specific functions such as accepting extradition only from the ISD. Using the FunGP library and SCP02 protocol, the tutorial walks through installation, personalization with encrypted keys, and extradition of applets under the new domain. GlobalPlatform specifications including GP CS v2.3 and GP CIC v2.0 are followed for install parameters, privileges, and STORE DATA commands. After personalization the SSD reaches the PERSONALIZED lifecycle state, allowing secure delegation of applet control while the ISD retains overall card management rights. The method eliminates the need for custom operating systems and provides a standards-compliant way to enforce least-privilege access on smart cards.