Re:Show HN: Hyprspace – A WireGuard Inspired VPN Built on Li...
by alecbcs on Saturday June 12, 2021 @10:58AM
(#27484925)
> Does it allow two devices, both behind NAT and without a public IP, to connect to each other?
It does! This is one of the big differences between it and something like Wireguard. It uses NAT hole punching to create direct links between machines without any manual configuration.
> Does it rely on some kind of central server that allows devices to discover each other?
Sort of? When you first boot up your first two nodes it uses a set of "bootstrap peers" hosted by the IPFS team. These bootstrap peers allow instances to initially connect to and share their locations with other hyprspace instances with the same discovery key. Although we use these peers for discovery, none of your data is ever sent through them. All of the connections hyperspace makes at the moment are direct end-to-end encrypted peer-to-peer connections.
Re:Show HN: Hyprspace – A WireGuard Inspired VPN Built on Li...
by vort3 on Monday June 14, 2021 @04:07AM
(#27500402)
That's great, but what I'm interested in is, what happens if those boostrap peers are somehow blocked or unavailable? Can we be sure that have 100% uptime?
Can we host our own bootstrap peer and point our hyprspace clients to use that?
Does it rely on some kind of central server that allows devices to discover each other?
It does! This is one of the big differences between it and something like Wireguard. It uses NAT hole punching to create direct links between machines without any manual configuration.
> Does it rely on some kind of central server that allows devices to discover each other?
Sort of? When you first boot up your first two nodes it uses a set of "bootstrap peers" hosted by the IPFS team. These bootstrap peers allow instances to initially connect to and share their locations with other hyprspace instances with the same discovery key. Although we use these peers for discovery, none of your data is ever sent through them. All of the connections hyperspace makes at the moment are direct end-to-end encrypted peer-to-peer connections.
Can we host our own bootstrap peer and point our hyprspace clients to use that?
If not, then how is it different from ZeroToer?