Hacker News Reader

Comment by jstewartmobile | Hacker News Reader

It can be done, but NAT traversal is hard, and somewhat flaky since not every firewall implements NAT exactly the same. I think Skype did NAT traversal in the early days, and eventually gave up and switched to media proxying for these reasons.

Throw in dynamic IP addresses, and it doesn't make things any easier.

Nerds can just set up DDNS and a port forward. Grandma probably can't.

View on HN

Changing IPs can be dealt with network-wide DHT or a known-peer approach.

The NAT traversal shenanigans only have to be successful on one side. When the geek manages to be reachable, they can talk to their grandparent, given they use software that tries to connect them, like RetroShare.

This doesn't cover all cases, but enough to be useful and valuable.

I'd posit that the reason everything gets jammmed through HTTP/HTTPS/SMTP/POP/IMAP/DNS now is that those are the only things we can reliably get through every firewall.

Home firewalls are easy. Most already have UPNP or NAT-PMP enabled, so the app can easily poke holes--even in TCP! Corporate ones (people procrastinating at work is a fat chunk of internet traffic) will have all kinds of ad-hoc rules that struck the network guy's fancy at the time.

For a truly P2P net (grandma-to-grandma), one side isn't enough.

Have you tried https://samy.pl/pwnat/ ?

I've implemented the same paper. It's fun, but not Grandma-ready.

Reply on news.ycombinator.com