3 ms·
I use this all the time when trying to get files between devices that need multiple hops to get to. Way easier then remembering what scp or rsync combo I need t
by klysm 1y ago
I use this all the time when trying to get files between devices that need multiple hops to get to. Way easier then remembering what scp or rsync combo I need to jump through a host
- hshdhdhehd 1y agoHmm how does this negotiate the hops or does it assume internet access? E.g. what if the last hop is inside a VPC.
- skeledrew 1y agoIt uses a rendezvous server to handle connecting.
- hshdhdhehd 1y agoGoogled. > Because of firewall network address translation (NAT) issues, rendezvous protocols generally require that there be at least one unblocked and un-NATed server that lets the peers locate each other and initiate concurrent packets at each other. So probably cant help with a VPC unless you pierce a hole for it. I guess this makes sense, since by design this shouldn't be possible.
- krageon 1y agoThe point of the intermediate server is so that you can NAT hole punch, otherwise it has little point (except maybe as a relay, which is a bad solution).
- lotharrr 1y agoWe're making good progress on hole-punching, but it isn't available yet. Once complete, that should take some pressure/cost off the transit relay machine. Note that the transit relay only sees ciphertext (for bulk data transfers). Even the mailbox server only sees ciphertext or SPAKE key-exchange messages. No server sees plaintext ever.
- krageon 1y agoThanks for the clarification. I didn't say the relay server is a bad solution because of transfer security (although it could be an issue), but rather because it is expensive in terms of bandwidth and so is unlikely to exist long-term.
- skeledrew 1y agoWell it allows you to customize the rendezvous server, so if you're on a network with no internet access you can host the server there.