Skip to content

Comment on Show HN: connet – A P2P reverse proxy with NAT traversal

Comments

Nice. I really like the config format regarding the services available/exposed.

Any particular reasons you haven't built upon wireguard that would handle encryption/security for you?

IngonOP

Thanks for taking a look!

Initially, I did think I'll be using wireguard. What stopped me at the time (as far as I remember) was that I couldn't just use the protocol part of the official golang library (e.g. https://git.zx2c4.com/wireguard-go/about/). Another thought I had at the time, was that I would had to use the user-space wireguard implementation, which everyone claimed was slow (I should have probably looked into how slow it is).

Another thought I had was to use the noise protocol (which wiregruard also uses) for security and building on top of that. Which meant I would have to implement most of what QUIC (and wireguard) does to make UDP a reliable protocol - retries, ordering, streams, etc. So, eventually, I just settled on using QUIC for the first version - later we can always add more ways for peers to connect to each other.

wireguard does not do any retries, ordering or streams, see the whitepaper and the code which are marvels of engineering.

IngonOP

thanks for correcting me, its been a while since I've looked at the whitepaper

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.