Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

VPN service for hosting public-facing services on non-hosting ISP circuits

holepunch.io

Post reply on HN
Print view View original

11–20 of 48 posts

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#12

Post by sdwisely »

fulafel wrote: post #7

This might actually be the future of running net-accessible stuff on your own devices, if the NAT-imposed unreachability continues to cement itself as the default expectation for people. Great that they have a free tier. Though I think you can do this same thing with many existing tunnel providers too, no?

> This might actually be the future of running net-accessible stuff on your own devices

I sure hope not, demand ipv6.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#13

Post by stedaniels »

The website looks good. Obviously early days since pricing is missing. Probably sorting out value proposition, how much they can get away with charging, etc.

A comparative point is using Cloudflare and Argo tunnel which I'm currently using.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#14

Post by graton »

sandov wrote: post #6

I'll try to use this for SSH. What's the best way to embed an SSH session inside of HTTP requests?

Usually you can just port forward a port above 1024 on your router to port 22 (SSH) on your computer inside your home network. This has worked for me for the ISPs I have used.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#16

Post by Tepix »

stedaniels wrote: post #13

The website looks good. Obviously early days since pricing is missing. Probably sorting out value proposition, how much they can get away with charging, etc. A comparative point is using Cloudflare and Argo tunnel which I'm currently using.

If you are technically capable to set it up by yourself using OpenVPN, you can get a dirt cheap VPS with one IPv4 address for less than $1/month ($12/year). lowendtalk.com is a community that discusses these deals.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#17

Post by vinay_ys »

Looking through the https://github.com/CypherpunkArmory/punch/blob/master/tunnel... seems to indicate it is just using a ssh connection between your box and their server and then forwarding traffic through that ssh connection.

If ssh is blocked by your IT admin, this will not work. In that sense this isn't doing any holepunching. In a more traditional definition of holepunching it meant to establish connection between two machines behind NAT stateful firewall and neither have static public IP addresses.

Also, looking at the code, there seems to not much emphasis on security w.r.t ssh host key verification or bootstrapping the chain of trust with pre-verified credentials etc. Weird choices for a project with cypherpunk in it's name.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#18

Post by vinay_ys »

sandov wrote: post #6

I'll try to use this for SSH. What's the best way to embed an SSH session inside of HTTP requests?

It seems to be using ssh to tunnel your http connection in the first place. So, if ssh is blocked in your network, this won't work.
Post reply on HN