Direct TCP/IP connections in P2P apps

Question

From a Joel\'s post on Copilot:

Direct Connect! We’ve always done everything we can to make sure that Fog Creek Copilot can connect in any netw

Answer 1

It's pretty tricky and interesting. I'm sure I have some details wrong, but the overview is this:

The programs can already talk to each other through Joel's server, so they can exchange information with each other and Joel's server. Further, Joel has their external IP addresses, and they give joel information about their internal IP addresses.

They decide to try this hole punch technique. Computer A initiates a TCP connection with Computer B using B's external IP address. It won't go through, but what it does is tell's A's router that it needs to allow incoming packets from B on a given port.

Computer B does the same thing, but its message gets through to A since A's router opened a port/ip combination that matches what B sent (there's some port magic that happens here - this is non trivial, but doable).

B's router remembers that B initiated a connection with A on a given port and IP, and so A's packets now flow into B past their router correctly as well.

So it's actually pretty straight forward, but the implementation has details, especially regarding how ports are given to new TCP connections, and how NAT routers typically deal with TCP requests and how they map to external ports. These details are the interesting, and difficult, bit.

-Adam

Answer 2

There is a technique called "Hole Punching" that works well with "Cone" NAT (Cone is a technical familly of router). That's not an 100% sure technique, today, it works well with UDP on about 80% of the router.

There is some implementations of library to realize Hole Punching: STUN (wikipedia)

Answer 3

I believe the simple version is that they drop the server connection and replace it with the P2P connection.

Something along the lines of:

1. Machine1 connects to copilot's servers.
2. Machine1 connects to copilot's servers.
3. Machine1 connects to copilot's servers.
4. Machine2 subsequently connects, and they begin screen sharing.
5. Machine2 opens a port intended for Machine1 to connect to.
6. Machine1 tries to connect to the now open port on Machine2.

If this connection is established:

1. The connection to copilot's servers is severed.
2. Data is instead transfered over the direct (P2P) connection between the two machines.