Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #3791

Re: How could I get a connection to an UDP port through two NATs that I don't own?

From Stefan Monnier <monnier@iro.umontreal.ca>
Newsgroups comp.os.linux.networking
Subject Re: How could I get a connection to an UDP port through two NATs that I don't own?
Date 2016-06-01 09:22 -0400
Organization A noiseless patient Spider
Message-ID <jwvh9ddkq1y.fsf-monnier+comp.os.linux.networking@gnu.org> (permalink)
References <nigg6g$n14$1@tota-refugium.de> <nigh28$q5v$1@tota-refugium.de> <slrnnko0m7.5q5.grahn+nntp@frailea.sa.invalid> <jwvy46pll3w.fsf-monnier+comp.os.linux.networking@gnu.org> <nim137$pm9$1@dont-email.me>

Show all headers | View raw


> The preferred port for OpenVPN is UDP/1194.

Sure.  But it works just as well over any other port you like.

It's common to use 443 so as to make sure it's available from pretty much
anywhere since 443 is almost never firewalled.  It even has special
support for sharing the 443 port with a web-server (config var
"port-share" which tells OpenVPN to forward incoming connections which
look like HTTPS instead of OpenVPN to some other port).

> There are good reasons to avoid running VPN over TCP.

UDP is preferable all things being equal, indeed.  But TCP works pretty
darn well, especially compared to "no other option" (when UDP is blocked
by a firewall).


        Stefan

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

How could I get a connection to an UDP port through two NATs that I don't own? Laszlo Lebrun <lazlo.lebrun@googlemail.com> - 2016-05-30 06:39 +0200
  Re: How could I get a connection to an UDP port through two NATs that I don't own? Laszlo Lebrun <lazlo.lebrun@googlemail.com> - 2016-05-30 06:54 +0200
    Re: How could I get a connection to an UDP port through two NATs that I don't own? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2016-05-30 09:07 +0000
      Re: How could I get a connection to an UDP port through two NATs that I don't own? "Carlos E.R." <robin_listas@invalid.es> - 2016-05-30 14:14 +0200
      Re: How could I get a connection to an UDP port through two NATs that I don't own? Laszlo Lebrun <lazlo.lebrun@googlemail.com> - 2016-05-30 21:09 +0200
        Re: How could I get a connection to an UDP port through two NATs that I don't own? William Unruh <unruh@invalid.ca> - 2016-05-30 20:56 +0000
          Re: How could I get a connection to an UDP port through two NATs that I don't own? Laszlo Lebrun <lazlo.lebrun@googlemail.com> - 2016-05-31 07:24 +0200
            Re: How could I get a connection to an UDP port through two NATs that I don't own? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2016-05-31 09:39 +0300
            Re: How could I get a connection to an UDP port through two NATs that I don't own? William Unruh <unruh@invalid.ca> - 2016-05-31 14:53 +0000
        Re: How could I get a connection to an UDP port through two NATs that I don't own? Aleksandar Kuktin <akuktin@gmail.com> - 2016-06-11 10:51 +0000
          Re: How could I get a connection to an UDP port through two NATs that I don't own? "Carlos E. R." <robin_listas@invalid.es> - 2016-06-11 14:15 +0200
          Re: How could I get a connection to an UDP port through two NATs that I don't own? Rick Jones <rick.jones2@hpe.com> - 2016-06-11 23:21 +0000
            Re: How could I get a connection to an UDP port through two NATs that I don't own? Stefan Monnier <monnier@iro.umontreal.ca> - 2016-06-15 23:11 -0400
      Re: How could I get a connection to an UDP port through two NATs that I don't own? Stefan Monnier <monnier@iro.umontreal.ca> - 2016-05-31 22:10 -0400
        Re: How could I get a connection to an UDP port through two NATs that I don't own? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2016-06-01 09:58 +0300
          Re: How could I get a connection to an UDP port through two NATs that I don't own? Stefan Monnier <monnier@iro.umontreal.ca> - 2016-06-01 09:22 -0400

csiph-web