Firewall traversal

2011-07-09 Thread Peter
Useful info dump: STUN (session traversal utilities for nat) servers are available on the internet. Current implementations of STUN use UDP, TCP is still under development. RUDP (Reliable UDP) is a plan 9 protocol that extends UDP. It provides some of the reliability features of TCP. There's

Re: Firewall traversal

2011-07-18 Thread Sim IJskes - QCG
On 10-07-11 06:37, Peter wrote: Any suggestions, ideas or assistance is welcome. A ServerEndpoint needs to know its external contact identity. In case of the TcpServerEndpoint the hostname where the client needs to connect to. A ServerEndpoint behind a NAT probably has a private net address/

Re: Firewall traversal

2011-07-18 Thread Peter Firmstone
Sim IJskes - QCG wrote: On 10-07-11 06:37, Peter wrote: Any suggestions, ideas or assistance is welcome. A ServerEndpoint needs to know its external contact identity. In case of the TcpServerEndpoint the hostname where the client needs to connect to. Correct, that would be the publicly vis

Re: Firewall traversal

2011-07-18 Thread Sim IJskes - QCG
On 18-07-11 14:07, Peter Firmstone wrote: Sim IJskes - QCG wrote: On 10-07-11 06:37, Peter wrote: Any suggestions, ideas or assistance is welcome. A ServerEndpoint needs to know its external contact identity. In case of the TcpServerEndpoint the hostname where the client needs to connect to.

Re: Firewall traversal

2011-07-18 Thread Peter Firmstone
Sim IJskes - QCG wrote: On 18-07-11 14:07, Peter Firmstone wrote: Sim IJskes - QCG wrote: On 10-07-11 06:37, Peter wrote: Any suggestions, ideas or assistance is welcome. A ServerEndpoint needs to know its external contact identity. In case of the TcpServerEndpoint the hostname where the cli

Re: Firewall traversal

2011-07-20 Thread Sim IJskes - QCG
On 19-07-11 02:35, Peter Firmstone wrote: If you take a look at TcpServerEndpoint.enumerateListenEndpoints where the TcpEndpoint is created (or fetched) for export, where it is serialized. You will see there that the endpoint description consists of host, port and socketFactory. In the TcpEndpo

Re: Firewall traversal

2011-07-20 Thread Sim IJskes - QCG
On 19-07-11 02:35, Peter Firmstone wrote: Uuid). The problem they ran into; the service and proxy needed to be trust verified again after the connection was reestablished, but permissions had already been granted. To make matters worse it was the I think that we only reach an optimal trust situ

Re: Firewall traversal

2011-07-20 Thread Peter Firmstone
Sim IJskes - QCG wrote: On 19-07-11 02:35, Peter Firmstone wrote: Uuid). The problem they ran into; the service and proxy needed to be trust verified again after the connection was reestablished, but permissions had already been granted. To make matters worse it was the I think that we only re

Re: Firewall traversal

2011-07-21 Thread Sim IJskes - QCG
On 20-07-11 14:04, Peter Firmstone wrote: The Endpoint implementations I'm interested in are the SSLEndpoint's. The socket in the SslConnection class is connected with a SocketAddress (in SslConnection.connectToSocketAddress). So if you have created your own Socket with your own SocketFactory

Re: Firewall traversal

2011-07-21 Thread Peter Firmstone
Sim IJskes - QCG wrote: On 20-07-11 14:04, Peter Firmstone wrote: The Endpoint implementations I'm interested in are the SSLEndpoint's. The socket in the SslConnection class is connected with a SocketAddress (in SslConnection.connectToSocketAddress) So if you have created your own Socket wit

Re: Firewall traversal

2011-07-22 Thread Sim IJskes - QCG
On 22-07-11 06:23, Peter Firmstone wrote: You're right about allowing for local connection paths for TURN, I wonder how we can tell we've got the right local subnet. Indeed. You need an external identity for your exported endpoint usable from the outside, and an internal identity for the insi