4 ms·
This is a fairly common scenario and one that we had in mind when building the NAT traversal implementation. The short answer is that you wouldn't need to sign
by jamilbk 2y ago
This is a fairly common scenario and one that we had in mind when building the NAT traversal implementation. The short answer is that you wouldn't need to sign out of Firezone when in the office -- the connection should hairpin off the nearest common router and go directly to the SMB share in this case.
- redrove 2y agoThis single handedly convinced me to try it out in my homelab! Tailscale fails at this and I consider it fairly basic networking.
- jamilbk 2y agoYou can read more about how we came up with the current implementation here: https://github.com/firezone/firezone/issues/3553 https://github.com/firezone/firezone/issues/3553 We didn't invent these techniques. Host candidates are part of standard ICE: https://datatracker.ietf.org/doc/html/rfc8445#section-5.1.1.1 https://datatracker.ietf.org/doc/html/rfc8445#section-5.1.1....