Open Source ZigBee stack designed to run on a host and communicate with a radio co-processor (RCP).
Current implementation aims for compatibility with OpenThread RCP firmware. That base provides compatibility with any chip manufacturer that supports it (Silabs, TI, etc.) with the only requirements being proper implementation of the STREAM_RAW mechanism of the Spinel protocol (which allows to send raw 802.15.4 frames, including... ZigBee!) and hardware MAC ACKing (much faster).
This library can also serve as a base for pentesting ZigBee networks thanks to the ability to easily craft various payloads at any layer of the specification and send them through the raw stream using any network parameters.
Important
Work in progress! Expect breaking changes without backwards compatibility for a while!
Some quick guidelines to keep the codebase maintainable:
- No external production dependencies
- Mark
TODO
/XXX
/@deprecated
in code as needed for quick access - Performance in mind (with the goal to eventually bring the appropriate layers to a lower language as needed)
- No expensive calls (stringify, etc.)
- Bail as early as possible (no unnecessary parsing, holding waiters, etc.)
- Ability to no-op expensive "optional" features
- And the usuals...
- Keep MAC/ZigBee property naming mostly in line with Wireshark for easier debugging
- Keep in line with the ZigBee 3.0 specification, but allow optimization due to the host-driven nature and removal of unnecessary features that won't impact compatibility
- Focus on "Centralized Trust Center" implementation (at least at first)
[~] Partial feature, [?] Uncertain feature
- Encoding/decoding of Spinel & HDLC protocols
- Encoding/decoding of MAC frames
- Encoding/decoding of ZigBee NWK frames
- lacking reference sniffs for multicast (group)
- Encoding/decoding of ZigBee NWK GP frames
- lacking reference sniffs, needs full re-check
- Encoding/decoding of ZigBee NWK APS frames
- Network forming
- Network state saving (de facto backups)
- Network state reset
- Joining/Rejoining
- APS TC link key update mechanism (global)
- Direct child router
- Direct child end device
- Nested device
- Indirect transmission mechanism
- Deal with devices lying on
rxOnWhenIdle
property (bad firmware, resulting in transmission type mismatch)
- Deal with devices lying on
- Source routing
- Coordinator LQI/Routing tables (for network map data on coordinator side)
- LQI reporting in messages (currently showing RSSI - in dBm)
- Install codes
- [?] APS APP link keys
- InterPAN / Touchlink
- R23 (need reference sniffs...)
- Security
- Metrics/Statistics
- Big cleanup of unused / never will use!
- Loads of testing!
- Optimize firmware building for this usage
And likely more, and of course a bunch of TODO
s in the code!
Use the appropriate OpenThread RCP firmware:
- Silabs adapters: https://github.com/Nerivec/silabs-firmware-builder/releases
- TI adapters: https://github.com/Koenkk/OpenThread-TexasInstruments-firmware/releases
Zigbee2MQTT 2.1.3-dev (after PR #26742) and later versions should allow the use of the zoh
adapter.
Make sure you followed the above steps to get the proper firmware, then configure your configuration.yaml
, including:
serial:
port: /dev/serial/by-id/my-device-id-here
adapter: zoh
# unused for TCP-based coordinator
baudrate: 460800
# as appropriate for your coordinator/firmware, unused for TCP-based coordinator
rtscts: true
Tip
ZigBee on Host saves the current state of the network in the file zoh.save
. It is similar to the NVRAM of an NCP coordinator.
This file contains everything needed to re-establish the network on start, hence, a coordinator_backup.json
is never created.
For Zigbee2MQTT, this file is alongside the database.db
in the data
folder.
Tip
The EUI64 (IEEE address) in the firmware of the coordinator is ignored in this mode. A static one is used instead (set by Zigbee2MQTT), allowing you to change coordinators at will on the same network (although you may encounter device-related troubles when radio specs vary wildly).
This is intended for developers to quickly test specific features, like joining. Currently, the CLI is output-only.
Install dev dependencies and build:
npm ci
npm run build
Configure parameters in dist/dev/conf.json
then start CLI (next start will use zoh.save
file, if not removed):
npm run dev:cli
Tip
Running npm run build:prod
omits the src/dev
directory.
Tip
If having issues with building, try removing the *.tsbuildinfo
incremental compilation files.
Tip
For testing purposes, you can create a network with a regular NCP, then take it over with the RCP by copying all network settings. This allows to bypass the join steps as needed.