Re:A hack I'm rather proud of
by e1ven on Tuesday November 27, 2007 @05:26AM
(#83887)
That's what openvpn is for.
Basically, it deals with the NAT-traversal elements for me, once I've twisted it's arm into doing so.. It works, if I recall correctly, using the UDP trick to keep a port open by sending traffic to a host repeatedly.
The nice part about the hack that I'm using is that I don't need to deal with the specifics of the UDP punching, or how often to poll, etc.. I can use industry tested and standard software for that.
Think of it this way-
Have you ever worked at a large corporation, that has a VPN? Once connected to that VPN, you could access all the servers internally, and they could access you, right?
We're basically creating a VPN, and giving everyone an internal IP address.. And then using linux, iptables, and NATing to map all those internal ip addresses to external ones.
Basically, it deals with the NAT-traversal elements for me, once I've twisted it's arm into doing so.. It works, if I recall correctly, using the UDP trick to keep a port open by sending traffic to a host repeatedly.
The nice part about the hack that I'm using is that I don't need to deal with the specifics of the UDP punching, or how often to poll, etc.. I can use industry tested and standard software for that.
Think of it this way-
Have you ever worked at a large corporation, that has a VPN? Once connected to that VPN, you could access all the servers internally, and they could access you, right?
We're basically creating a VPN, and giving everyone an internal IP address.. And then using linux, iptables, and NATing to map all those internal ip addresses to external ones.