NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
A most elegant TCP hole punching algorithm (robertsdotpm.github.io)
EnigmaCurry 2 minutes ago [-]
> Many home routers try to preserve the source port in external mappings. This is a property called “equal delta mapping” – it won’t work on all routers but for our algorithm we’re sacrificing coverage for simplicity.

It is precisely this point that has flummoxed me when connecting my p2p wireguard config[1] with a friend that uses a pfsense router, no matter what we tried, pfsense always chooses a random source port.

But in the simple case this blog outlines, if both ends use the same source port, this method punches through 2 firewalls effortlessly:

[1] https://blog.rymcg.tech/blog/linux/wireguard_p2p/

jcalvinowens 11 minutes ago [-]
If you're asking "where is the listener", you don't need one: https://datatracker.ietf.org/doc/html/rfc9293#simul_connect
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 05:39:38 GMT+0000 (Coordinated Universal Time) with Vercel.