[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CPE equipments and stateful filters



On 24-jul-2007, at 13:41, Rémi Denis-Courmont wrote:

An important issue about the hole punching is the shape of the hole.
If the hole has the shape of a particular transport session, you're
not accomplishing much because you still can't receive arbitrary
incoming sessions.
Yes, that still sucks. But if you have BEHAVE-TCP support, you can at least do TCP simultaneous open (forget about DCCP and SCTP though), provided you have
an out-of-band signaling mechanism.
Without BEHAVE-TCP, you cannot do home-to-home at all, and you have to invent
your own crappy[1] protocol on top of UDP.
Note that currently deployed NAT-PMP (Apple) and UPnP (the rest of  
the world) forward all incoming sessions from the outside world  
towards a specific port number towards the host that registered that  
port number using NAT-PMP/UPnP, so the host in question gets to act  
as a regular server (well, there's still NAT), no need for  
simultaneous open or UDP tricks.