TCP tunneling to supernodes about zerotierone HOT 7 CLOSED

I know (my school's firewall at least) doesn't block anything on 80 or 443 even if it's not HTTP(S). They do block the high TCP and UDP ports, as those are commonly used for peer-to-peer applications. So just using low ports as a fall-back might work.

from zerotierone.

setupminimal: do you know if they block UDP on 80 or 443? I've been tempted to make supernode traffic use UDP/443 but this is a double-edged sword... it would make the traffic look very weird and suspicious to many IT network people.

from zerotierone.

Also: do you know if they block low-numbered UDP ports in general? Like what about UDP port 993?

from zerotierone.

I could do some testing, if you'd like, but I don't know about low UDP. I do know that TCP ports 80 and 443 are unfiltered except for certain 'inappropriate' domains. I think that almost all the other ports are closed. I haven't bothered testing exhaustively, but, for instance, 25565 (Minecraft), 8080 (YACY), and 9993 (Zerotier-one) are all blocked.

As far as UDP on 443 . . . DNS uses UDP on 53, and computers do legitimately make a lot of DNS requests. There are ports that I'm certain must be open, for basic internet service, that use UDP, so using one of those could be good camouflage.

from zerotierone.

I'm probably just going to stick to TCP. That will work everywhere. It will be slower, but that's the penalty for being behind a nasty firewall.

from zerotierone.

Almost done with this... will be in next release. I made it look like TLS and it will talk to supernodes over port 443, so this will tunnel past everything except SSL-in-the-middle BlueCoat. Chances are if you have BlueCoat on your network you are behind a corporate firewall and would need to get IT permission to run this anyway.

As far as countries with firewall fascism on the national level, getting around that is beyond the scope of this project. Consider Tor. Using TCP tunneling it would be possible to use ZeroTier over Tor.

from zerotierone.

Closing as this is working, will be in next release! (Probably sometime next week.)

from zerotierone.