5 ms·
I’m curious, if we have a hub and spoke vpn, could we have peer to peer end to end encryption, with the exchange between them facilitated by an untrusted hub on
by aborsy 3y ago
I’m curious, if we have a hub and spoke vpn, could we have peer to peer end to end encryption, with the exchange between them facilitated by an untrusted hub on a cloud instance?
So, the phone wants to connect to a media server at home. In hub and spoke vpn, both connect to a vpn server. The problem is, the traffic decrypted on VPS. I want the packers from phone go to vps then to home, with end to end encryption. The VPS acts as a relay.
The connection between peers need not be direct (peer to peer). The traffic could go through the central hub if needed. I just don’t want the hub to access the decrypted traffic.
- candiodari 3y agoIn professional settings what you're describing is more-or-less what DMVPN provides.
- no_time 3y agoYou basically described Tor.
- aborsy 3y agoMesh VPN is one way. The VPS node will be the coordination server. Tor is another, onion layers of tunnels. But maybe there is an easy networking solution, like creating a route table on VPS implementing a relay or STUN server , that says traffic coming from the peers public key is exchanged on VPS server.
- pluto_modadic 3y agomesh VPNs (tailscale, zerotier) are what you want :) tailscale will do the hole punching for you. :)